last executing test programs: 3.079111462s ago: executing program 2 (id=7457): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x4000009a}]}) 2.947829613s ago: executing program 2 (id=7462): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x1, 0x16b, 0x7ffffffe, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{0x2}, 0x8, 0x3, 0x0, 0x0, "ae771949a0cb35d4"}}, 0x48}}, 0x20000000) 2.783249686s ago: executing program 2 (id=7464): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000040)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x3808}]}, 0x24}, 0x1, 0x0, 0x0, 0x805}, 0x40084) 2.600166691s ago: executing program 2 (id=7478): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x54c, 0xce6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x20, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000001200)={0x0, 0x22, 0x2, {[@local=@item_012={0x1, 0x2, 0x0, '@'}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x1, 0x14, "59a356095adff223f9a72ddae271d303b38c64c9"}, 0x0}) 2.342692641s ago: executing program 1 (id=7471): set_mempolicy(0x2, &(0x7f0000000140)=0x8001, 0x2) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="6673796e635f6d6f64653d706f7369782c6e6f696e6c696e655f646174612c6469736361726400aa19fd46b492dc6cf59d696e6c696e655f64656e7472792c00"], 0x1, 0x550e, &(0x7f0000005980)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x83343, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x4004f506, &(0x7f0000000140)) 1.412352446s ago: executing program 0 (id=7480): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000400000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0x130, 0x26010000, 0x0, 0x130, 0x220, 0x220, 0x220, 0x220, 0x220, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x130, 0x0, {0x0, 0x25e}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@state={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@dev, @mcast1, [], [], 'bridge_slave_0\x00', 'dummy0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x2, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) 1.411164206s ago: executing program 3 (id=7481): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0xfffffff5, 0x0, 0x0) close(0x3) 1.270207948s ago: executing program 0 (id=7482): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = mq_open(&(0x7f0000000000)='!selinuxsel\xad\"\x0e\xabx\xb8\xc9\xa8x\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_notify(r0, &(0x7f0000000200)={0x0, 0x8}) mq_notify(r0, 0x0) 1.200059774s ago: executing program 4 (id=7483): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x80, &(0x7f0000000400)={[{@nr_inodes={'nr_inodes', 0x3d, [0x47]}}]}) chdir(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x141842, 0x0) 1.178238255s ago: executing program 0 (id=7484): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000600)={[{@debug}, {@delalloc}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x10000}}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbbd, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x92) setreuid(0xee01, 0xee00) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 983.229981ms ago: executing program 3 (id=7485): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0x6, {0x7, 0x8, 0x0, 0x774f}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x6, 0x1000}}, @TCA_NETEM_RATE64={0xc, 0x8, 0xf4b471591a33b280}]}}}]}, 0x78}}, 0x10) 876.75001ms ago: executing program 3 (id=7486): connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r1}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) 872.86771ms ago: executing program 1 (id=7487): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0xfffffff6, @private0, 0x9}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in6={{0xa, 0x4e23, 0x8, @private0, 0x8}}, 0x80000000, 0x1f4, 0x0, 0x0, 0xce024d}, 0x9c) 782.687927ms ago: executing program 4 (id=7488): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) 750.33651ms ago: executing program 0 (id=7489): r0 = gettid() r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x0) readv(r1, &(0x7f0000002940)=[{&(0x7f00000000c0)=""/121, 0xe80}, {0x0, 0xe00}], 0x10000000000000fb) tkill(r0, 0x7) 690.586505ms ago: executing program 3 (id=7490): sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c", 0x3, 0x80800, 0x0, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x6, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff"}) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r0, r0, r0}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) 619.2777ms ago: executing program 1 (id=7491): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e01, 0x9, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) 558.340755ms ago: executing program 0 (id=7492): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) setresuid(0x0, 0xee00, 0x0) ioctl$KIOCSOUND(r0, 0x4b2f, 0x7) 558.202795ms ago: executing program 4 (id=7493): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TARGET={0x4}]}}]}, 0x38}}, 0x0) 441.825115ms ago: executing program 1 (id=7494): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macsec0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x10) 411.898757ms ago: executing program 4 (id=7495): r0 = add_key$keyring(&(0x7f0000000780), &(0x7f00000007c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000840), &(0x7f0000000880)={'fscrypt:', @desc2}, &(0x7f00000008c0)={0x0, "ed426d436179868323920a5adc54a31b3a64a11b7374298d6245e8c488f527db189552c04e929ebde52f12a666c99a8d8493c5dca674a46be2fb61d699aee7af", 0x39}, 0x48, r0) keyctl$read(0xb, r0, &(0x7f0000000140)=""/4, 0x4) 403.664438ms ago: executing program 0 (id=7496): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_emit_ethernet(0x46, &(0x7f0000001840)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @private}, @mcast2, {[], @ni={0x8c}}}}}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004107f540f30c7593de1a000000010902240001000000000904000002bee4f900090503", @ANYRES16], 0x0) 323.763874ms ago: executing program 4 (id=7497): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000013c0)=[{{&(0x7f0000001140)={0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000001280)=[{&(0x7f0000001dc0)="bc", 0x1}], 0x1}}], 0x1, 0x8040) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x1f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) 253.12133ms ago: executing program 2 (id=7498): r0 = syz_open_dev$media(&(0x7f0000000100), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000040)={0x80000000, 0x0, &(0x7f0000000200)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000340)={r1, 0x0, &(0x7f0000000280)=[{{0x80000000, 0x0}, {0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f00000001c0)={{r2, r3, 0x2, [0x7ffb, 0x4]}, {r4, 0x0, 0xf, [0x8, 0x3]}, 0x0, [0x4, 0xfffffffd]}) 243.670641ms ago: executing program 1 (id=7499): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c460407000307000000000000000200030003000000090300"], 0x58) close(r0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 154.500828ms ago: executing program 4 (id=7500): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000600)={[{@debug}, {@delalloc}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x10000}}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbbd, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x92) setreuid(0xee01, 0xee00) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 63.393415ms ago: executing program 2 (id=7501): syz_mount_image$exfat(&(0x7f0000000180), &(0x7f0000000240)='./file0\x00', 0x200048cc, &(0x7f0000000300)=ANY=[], 0x81, 0x151a, &(0x7f0000002a80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000000, 0x0, 0x41, 0x0, &(0x7f00000000c0)) 63.306095ms ago: executing program 3 (id=7502): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000480)={0x3, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000000)=0xe1) 37.582107ms ago: executing program 1 (id=7503): r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xee01, 0xee01) keyctl$setperm(0x5, r0, 0xd012117) keyctl$read(0xb, r0, 0x0, 0x0) 0s ago: executing program 3 (id=7504): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x1, 0x70bd2b, 0x25dfdbf6, {0x0, 0x0, 0x0, r2, 0x24004, 0x5922b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) kernel console output (not intermixed with test programs): e syscall=231 compat=0 ip=0x7ff49bcdbbe9 code=0x0 [ 628.750556][T15441] loop3: detected capacity change from 0 to 4096 [ 628.829825][T15388] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 628.979890][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 629.706371][T15461] netlink: 'syz.2.5048': attribute type 1 has an invalid length. [ 629.901986][ T4978] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 630.228116][ T4978] usb 5-1: Using ep0 maxpacket: 8 [ 630.309410][ T23] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 630.436111][ T4978] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 630.479865][ T4978] usb 5-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 630.503831][ T4978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.546050][ T4978] usb 5-1: config 0 descriptor?? [ 630.734892][T15441] ntfs: (device loop3): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 630.754384][T15441] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 630.792119][T15441] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 630.836982][T15441] ntfs: (device loop3): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 630.883189][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 630.914782][T15489] sp0: Synchronizing with TNC [ 630.947008][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 630.950585][T15488] [U] è [ 631.008973][ T23] usb 3-1: New USB device found, idVendor=056a, idProduct=0217, bcdDevice= 0.fc [ 631.059054][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.084433][ T4978] kye 0003:0458:4018.0035: hidraw0: USB HID v0.07 Device [HID 0458:4018] on usb-dummy_hcd.4-1/input0 [ 631.110335][ T23] usb 3-1: config 0 descriptor?? [ 631.353058][T14009] usb 5-1: USB disconnect, device number 24 [ 631.389387][T15441] ntfs: volume version 3.1. [ 631.627884][ T23] wacom 0003:056A:0217.0036: Unknown device_type for 'HID 056a:0217'. Ignoring. [ 631.939419][T14009] usb 3-1: USB disconnect, device number 38 [ 633.605371][T15519] program syz.2.5077 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 634.301843][T15543] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5086'. [ 634.501140][T15550] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 634.887719][T15559] loop3: detected capacity change from 0 to 2048 [ 635.702705][T15557] loop4: detected capacity change from 0 to 32768 [ 636.671769][T15588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5110'. [ 636.748809][T15588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5110'. [ 636.772004][T15588] netlink: 'syz.2.5110': attribute type 14 has an invalid length. [ 637.089523][T15598] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5115'. [ 637.268005][T15559] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 637.365090][T15559] ext4 filesystem being mounted at /820/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 637.511411][T15610] comedi comedi3: dt2801: I/O port conflict (0x10,2) [ 637.523911][T15557] (syz.4.5094,15557,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 637.642862][T15557] (syz.4.5094,15557,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 637.683647][T15607] fido_id[15607]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 638.160068][T15557] (syz.4.5094,15557,0):ocfs2_initialize_super:2313 ERROR: status = -12 [ 638.215317][T15557] (syz.4.5094,15557,1):ocfs2_fill_super:1177 ERROR: status = -12 [ 638.342366][T15621] device netdevsim0 entered promiscuous mode [ 638.371284][T15621] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 638.778899][ T4248] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 639.361411][ T4248] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 639.385185][ T4248] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 639.560829][ T4248] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 639.579222][ T4248] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 639.642282][ T4248] usb 4-1: SerialNumber: syz [ 639.854666][ T4227] kworker/dying (4227) used greatest stack depth: 20320 bytes left [ 639.977784][ T4248] usb 4-1: 0:2 : does not exist [ 640.110210][ T4248] usb 4-1: USB disconnect, device number 28 [ 640.516733][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 640.576641][T15659] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5141'. [ 640.637751][T15660] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5142'. [ 640.684628][T15661] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5141'. [ 642.116987][T15686] netlink: 'syz.0.5154': attribute type 3 has an invalid length. [ 643.104346][T15678] loop3: detected capacity change from 0 to 32768 [ 643.242609][T15701] netlink: 'syz.1.5161': attribute type 5 has an invalid length. [ 643.899925][T15712] program syz.1.5166 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 644.029241][T15678] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 644.100738][T15695] loop4: detected capacity change from 0 to 32768 [ 644.263700][ T4185] ocfs2: Unmounting device (7,3) on (node local) [ 644.948830][T15695] JBD2: Ignoring recovery information on journal [ 645.207804][T15695] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 645.630501][ T4195] ocfs2: Unmounting device (7,4) on (node local) [ 647.012917][ T4248] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 647.592904][ T4248] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 647.594881][T15759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5189'. [ 647.615458][ T4248] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 647.964640][ T4248] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 647.983941][ T4248] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.045312][ T4248] usb 4-1: Product: syz [ 648.083903][ T4248] usb 4-1: Manufacturer: syz [ 648.094988][ T4248] usb 4-1: SerialNumber: syz [ 648.320613][T15773] loop4: detected capacity change from 0 to 2048 [ 648.501383][ T4248] usb 4-1: 0:2 : does not exist [ 648.577263][ T4248] usb 4-1: USB disconnect, device number 29 [ 648.908093][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 649.795251][T15773] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 649.866151][T15785] autofs4:pid:15785:autofs_fill_super: called with bogus options [ 650.041654][T15787] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 650.183106][T15789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5204'. [ 650.819637][T15783] loop3: detected capacity change from 0 to 40427 [ 650.824846][T15795] loop4: detected capacity change from 0 to 16 [ 650.885649][T15795] erofs: (device loop4): mounted with root inode @ nid 36. [ 651.285976][T15783] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x1ffff [ 651.302867][T15801] option changes via remount are deprecated (pid=15800 comm=syz.0.5210) [ 651.418301][T15783] F2FS-fs (loop3): invalid crc value [ 651.707648][T15783] F2FS-fs (loop3): Found nat_bits in checkpoint [ 651.983023][T15783] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 652.189735][T15818] syz.2.5217 (15818): drop_caches: 2 [ 652.228286][T15818] syz.2.5217 (15818): drop_caches: 2 [ 652.712496][T15843] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5230'. [ 653.263383][T15859] syz.0.5237 (15859): drop_caches: 2 [ 653.323264][T15859] syz.0.5237 (15859): drop_caches: 2 [ 654.182820][ T4389] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 654.548628][ T4389] usb 5-1: Using ep0 maxpacket: 32 [ 654.715648][ T4389] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 654.725724][ T4389] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 654.779922][ T4389] usb 5-1: config 0 interface 0 has no altsetting 0 [ 654.786781][ T4389] usb 5-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 654.810580][ T4389] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.837277][ T4389] usb 5-1: config 0 descriptor?? [ 655.358709][ T4389] aureal 0003:0755:2626.0037: item fetching failed at offset 3/5 [ 655.433124][ T4389] aureal: probe of 0003:0755:2626.0037 failed with error -22 [ 655.596233][ T4389] usb 5-1: USB disconnect, device number 25 [ 656.211466][T15905] netlink: 'syz.4.5257': attribute type 1 has an invalid length. [ 656.233184][T15905] netlink: 'syz.4.5257': attribute type 2 has an invalid length. [ 656.251117][T15905] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5257'. [ 656.428080][T15893] loop3: detected capacity change from 0 to 32768 [ 657.052106][T15921] comedi comedi3: 8255: I/O port conflict (0x404f26,4) [ 657.109810][T15921] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 657.116703][T15921] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 657.143688][T15921] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 657.143701][T15923] tmpfs: Bad value for 'mpol' [ 657.150636][T15921] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 657.178448][T15921] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 657.189641][T15921] comedi comedi3: 8255: I/O port conflict (0x3bf,4) [ 657.221841][T15921] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 657.235840][T15921] comedi comedi3: 8255: I/O port conflict (0x20000001,4) [ 657.288101][T15921] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 657.343871][T15921] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 657.353819][T15921] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 657.389081][T15921] comedi comedi3: 8255: I/O port conflict (0x400,4) [ 657.414821][T15921] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 657.427494][T15893] (syz.3.5252,15893,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 657.469406][T15893] (syz.3.5252,15893,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 658.015387][T15893] JBD2: Ignoring recovery information on journal [ 658.168030][T15950] netlink: 'syz.0.5280': attribute type 10 has an invalid length. [ 658.401259][T15893] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 659.363790][ T4185] ocfs2: Unmounting device (7,3) on (node local) [ 660.569951][T16011] hfs: can't find a HFS filesystem on dev nullb0 [ 660.631785][T16013] netlink: 'syz.1.5311': attribute type 8 has an invalid length. [ 661.288829][T16031] sp0: Synchronizing with TNC [ 661.319362][T16031] sp0: Found TNC [ 661.970112][T16041] netlink: 'syz.3.5324': attribute type 1 has an invalid length. [ 662.539504][T16055] device bridge1 entered promiscuous mode [ 662.656552][T16055] team0: Port device bridge1 added [ 662.886765][T16063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5335'. [ 662.932225][T16063] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 663.013080][T16035] loop4: detected capacity change from 0 to 40427 [ 663.272754][T16075] genirq: Flags mismatch irq 5. 00000000 (pcl816) vs. 00000000 (das16m1) [ 663.517606][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 664.034493][T16102] netlink: 'syz.2.5354': attribute type 9 has an invalid length. [ 664.755153][T16123] loop3: detected capacity change from 0 to 2048 [ 664.864943][T16123] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 665.001793][T16131] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 668.313501][T16198] netlink: 'syz.3.5399': attribute type 2 has an invalid length. [ 668.340187][T16200] loop4: detected capacity change from 0 to 256 [ 669.268583][T16224] loop3: detected capacity change from 0 to 1024 [ 669.364308][T16200] FAT-fs (loop4): Directory bread(block 64) failed [ 669.379437][T16200] FAT-fs (loop4): Directory bread(block 65) failed [ 669.414482][T16200] FAT-fs (loop4): Directory bread(block 66) failed [ 669.421222][T16200] FAT-fs (loop4): Directory bread(block 67) failed [ 669.443263][T16200] FAT-fs (loop4): Directory bread(block 68) failed [ 669.450047][T16200] FAT-fs (loop4): Directory bread(block 69) failed [ 669.481184][T16200] FAT-fs (loop4): Directory bread(block 70) failed [ 669.506576][T16200] FAT-fs (loop4): Directory bread(block 71) failed [ 669.526494][T16200] FAT-fs (loop4): Directory bread(block 72) failed [ 669.554722][T16200] FAT-fs (loop4): Directory bread(block 73) failed [ 669.626105][T16200] attempt to access beyond end of device [ 669.626105][T16200] loop4: rw=2051, want=1256, limit=256 [ 670.981125][ T3096] hfsplus: b-tree write err: -5, ino 4 [ 672.146345][T16249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5425'. [ 672.228899][T16249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5425'. [ 672.254049][T16249] netlink: 'syz.1.5425': attribute type 11 has an invalid length. [ 673.002500][T16273] program syz.2.5437 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 673.864021][T16296] loop3: detected capacity change from 0 to 128 [ 673.977363][T16301] tipc: Enabling of bearer rejected, failed to enable media [ 674.276289][T16304] loop4: detected capacity change from 0 to 4096 [ 674.741332][T16304] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 675.962926][T16296] autofs4:pid:16296:autofs_fill_super: called with bogus options [ 676.091989][ T4389] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 676.226031][T16329] device veth0_virt_wifi entered promiscuous mode [ 676.359682][T16332] lo speed is unknown, defaulting to 1000 [ 676.410179][T16332] lo speed is unknown, defaulting to 1000 [ 676.479143][T16332] lo speed is unknown, defaulting to 1000 [ 676.545006][ T4389] usb 3-1: Using ep0 maxpacket: 32 [ 676.566951][T16332] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 676.594677][T16332] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 676.710883][T16332] lo speed is unknown, defaulting to 1000 [ 676.722074][ T4389] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 676.730488][ T4389] usb 3-1: config 0 has no interface number 0 [ 676.770793][T16332] lo speed is unknown, defaulting to 1000 [ 676.797191][T16332] lo speed is unknown, defaulting to 1000 [ 676.829520][T16332] lo speed is unknown, defaulting to 1000 [ 676.855669][T16332] lo speed is unknown, defaulting to 1000 [ 676.990301][ T4389] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 677.002316][ T4389] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.010546][ T4389] usb 3-1: Product: syz [ 677.046458][ T4389] usb 3-1: Manufacturer: syz [ 677.056313][ T4389] usb 3-1: SerialNumber: syz [ 677.102034][ T4389] usb 3-1: config 0 descriptor?? [ 677.211413][ T4389] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 677.438767][ T4389] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 677.521390][ T4389] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 677.863771][T16366] netlink: 'syz.1.5479': attribute type 41 has an invalid length. [ 677.911040][ T5699] usb 3-1: USB disconnect, device number 39 [ 677.920916][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -108 [ 677.937354][ T5699] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 677.971551][ T5699] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 677.997378][ T5699] quatech2 3-1:0.51: device disconnected [ 678.377092][ T4979] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 678.911818][ T4979] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 678.923621][ T4979] usb 5-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 679.017256][ T4979] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.058950][ T4979] usb 5-1: config 0 descriptor?? [ 679.279892][ T1346] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 679.538677][ T1106] hid-generic 0000:FFFFFFFD:0000.0038: unknown main item tag 0x0 [ 679.612097][ T1106] hid-generic 0000:FFFFFFFD:0000.0038: unknown main item tag 0x0 [ 679.624527][ T4979] kye 0003:0458:0153.0039: hidraw0: USB HID v0.06 Device [HID 0458:0153] on usb-dummy_hcd.4-1/input0 [ 679.681456][ T1106] hid-generic 0000:FFFFFFFD:0000.0038: hidraw1: HID v0.00 Device [syz0] on syz1 [ 679.864934][ T1346] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 679.884504][ T1346] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 679.906043][ T1346] usb 4-1: New USB device found, idVendor=046d, idProduct=c713, bcdDevice= 0.00 [ 679.925841][ T4979] usb 5-1: USB disconnect, device number 26 [ 679.930796][ T1346] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.027828][ T1346] usb 4-1: config 0 descriptor?? [ 680.115766][T16388] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 680.182288][T16419] fido_id[16419]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 680.198483][T16412] fido_id[16412]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 680.321039][T16425] program syz.0.5505 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 680.625684][ T1346] logitech-djreceiver 0003:046D:C713.003A: unbalanced delimiter at end of report description [ 680.680983][ T1346] logitech-djreceiver 0003:046D:C713.003A: logi_dj_probe: parse failed [ 680.689400][ T1346] logitech-djreceiver: probe of 0003:046D:C713.003A failed with error -22 [ 680.816321][T16437] loop4: detected capacity change from 0 to 64 [ 680.890641][ T1346] usb 4-1: USB disconnect, device number 30 [ 680.938629][ T4979] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 681.267340][ T4979] usb 3-1: Using ep0 maxpacket: 16 [ 681.449073][ T4979] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 681.505820][ T4979] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 681.542151][ T4979] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 681.610353][ T4979] usb 3-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 681.640763][ T4979] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.667356][ T4979] usb 3-1: config 0 descriptor?? [ 682.196934][ T4979] hid-generic 0003:0457:07DA.003B: unknown main item tag 0x4 [ 682.240466][ T4979] hid-generic 0003:0457:07DA.003B: item fetching failed at offset 32/34 [ 682.279515][ T4979] hid-generic: probe of 0003:0457:07DA.003B failed with error -22 [ 682.352011][T16467] atomic_op ffff88806325f998 conn xmit_atomic 0000000000000000 [ 682.471636][ T4979] usb 3-1: USB disconnect, device number 40 [ 682.556633][ T26] audit: type=1326 audit(2000000446.549:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16471 comm="syz.1.5525" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcfcd285be9 code=0x0 [ 682.575531][T16473] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5526'. [ 682.881618][T16482] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5530'. [ 683.149882][T16491] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5534'. [ 683.435035][T16499] device bond_slave_0 entered promiscuous mode [ 683.442474][T16499] device bond_slave_1 entered promiscuous mode [ 683.544196][T16499] device macsec1 entered promiscuous mode [ 683.588891][T16499] device bond0 entered promiscuous mode [ 683.675531][T16499] device bond0 left promiscuous mode [ 683.727441][T16499] device bond_slave_0 left promiscuous mode [ 683.733763][T16499] device bond_slave_1 left promiscuous mode [ 683.746226][T16510] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5542'. [ 683.969909][T16517] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 683.969909][T16517] The task syz.0.5545 (16517) triggered the difference, watch for misbehavior. [ 684.179725][T16519] loop4: detected capacity change from 0 to 4096 [ 685.514685][T16519] ntfs: volume version 3.1. [ 685.922784][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.929707][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.951633][T16519] ntfs: (device loop4): ntfs_truncate(): Inode 0x42 has unknown attribute type 0x80. Aborting truncate. [ 686.111612][ T4979] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 686.145540][ T4979] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 686.191640][ T4978] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 686.777719][ T4248] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 686.982800][ T4248] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 689.176963][T16609] netlink: 'syz.1.5577': attribute type 298 has an invalid length. [ 690.155624][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 690.853320][T16645] netlink: 136 bytes leftover after parsing attributes in process `syz.2.5594'. [ 692.726148][T16688] loop3: detected capacity change from 0 to 256 [ 692.976514][ T4979] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 693.590335][ T4979] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 693.622874][ T4979] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 693.643574][ T4979] usb 3-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.00 [ 693.699049][ T4979] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.749951][ T4979] usb 3-1: config 0 descriptor?? [ 693.933688][T16700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5620'. [ 694.218272][T16690] loop3: detected capacity change from 0 to 32768 [ 694.276486][ T4979] wacom 0003:056A:0028.003C: Unknown device_type for 'HID 056a:0028'. Assuming pen. [ 694.302705][ T4979] wacom 0003:056A:0028.003C: hidraw0: USB HID v0.00 Device [HID 056a:0028] on usb-dummy_hcd.2-1/input0 [ 694.302796][T16704] netlink: 'syz.0.5622': attribute type 6 has an invalid length. [ 694.339828][ T4979] input: Wacom Intuos5 touch L Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0028.003C/input/input56 [ 694.396040][T16694] loop4: detected capacity change from 0 to 32768 [ 694.523892][ T4979] usb 3-1: USB disconnect, device number 41 [ 696.941185][ T26] audit: type=1326 audit(2000000460.940:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16745 comm="syz.1.5644" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcfcd285be9 code=0x0 [ 697.530476][T16763] loop3: detected capacity change from 0 to 256 [ 698.091165][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 698.395908][T16776] fuse: Invalid rootmode [ 699.301617][T16793] loop4: detected capacity change from 0 to 1024 [ 699.514733][T16763] exfat: Deprecated parameter 'namecase' [ 699.525007][T16763] exfat: Deprecated parameter 'utf8' [ 700.148292][T16763] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x22785e93, utbl_chksum : 0xe619d30d) [ 700.181180][ T4979] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 700.687841][ T4979] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 700.724500][ T4979] usb 3-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 700.745435][ T4979] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.772594][ T4979] usb 3-1: config 0 descriptor?? [ 700.827250][T16806] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 701.126792][T16824] loop3: detected capacity change from 0 to 8192 [ 701.203797][ T4248] Bluetooth: hci4: command 0x0405 tx timeout [ 701.399206][ T4979] belkin 0003:050D:3201.003D: item fetching failed at offset 0/3 [ 701.428742][ T4979] belkin 0003:050D:3201.003D: parse failed [ 701.435036][ T4979] belkin: probe of 0003:050D:3201.003D failed with error -22 [ 701.539759][T16793] hfsplus: bad catalog entry type [ 701.673290][ T4248] usb 3-1: USB disconnect, device number 42 [ 701.713894][ T3096] hfsplus: b-tree write err: -5, ino 4 [ 701.900787][T16827] fido_id[16827]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 703.483778][T16824] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 703.494584][T16824] REISERFS (device loop3): using journaled data mode [ 703.556280][T16824] reiserfs: using flush barriers [ 703.592943][T16824] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 703.648251][T16824] REISERFS (device loop3): checking transaction log (loop3) [ 703.803288][T16824] REISERFS (device loop3): Using r5 hash to sort names [ 703.839427][T16824] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 703.890821][T16824] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 705.337525][T16893] loop4: detected capacity change from 0 to 256 [ 705.443147][T16893] FAT-fs (loop4): Unrecognized mount option "shortame=lower" or missing value [ 707.946566][T16907] loop4: detected capacity change from 0 to 40427 [ 708.172657][T16907] F2FS-fs (loop4): invalid crc value [ 708.375148][T16907] F2FS-fs (loop4): Found nat_bits in checkpoint [ 708.561257][T16907] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 710.115980][T16967] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 711.821960][T16998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5761'. [ 712.037841][T17003] program syz.1.5763 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 712.262337][T17006] loop4: detected capacity change from 0 to 4096 [ 712.509950][T17016] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5768'. [ 712.833897][T17029] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5774'. [ 713.571503][ T26] audit: type=1326 audit(2000000477.562:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17037 comm="syz.1.5778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcd285be9 code=0x7ffc0000 [ 713.666659][ T26] audit: type=1326 audit(2000000477.602:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17037 comm="syz.1.5778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7fcfcd285be9 code=0x7ffc0000 [ 713.766172][ T26] audit: type=1326 audit(2000000477.602:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17037 comm="syz.1.5778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcd285be9 code=0x7ffc0000 [ 714.067147][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 714.666529][ T5699] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 714.843718][T17006] ntfs: (device loop4): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 714.905808][T17006] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 714.920688][T17006] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 714.960298][T17006] ntfs: (device loop4): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 715.406781][T17070] loop3: detected capacity change from 0 to 32768 [ 715.565436][ T5699] usb 3-1: unable to get BOS descriptor or descriptor too short [ 715.708731][T17006] ntfs: volume version 3.1. [ 715.769671][ T5699] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 715.776747][T17070] XFS (loop3): Mounting V5 Filesystem [ 715.836139][ T5699] usb 3-1: can't read configurations, error -71 [ 717.663806][T17096] loop4: detected capacity change from 0 to 40427 [ 717.813083][T17096] F2FS-fs (loop4): invalid crc value [ 717.923554][T17096] F2FS-fs (loop4): Found nat_bits in checkpoint [ 718.163630][T17096] F2FS-fs (loop4): Start checkpoint disabled! [ 718.282942][T17096] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 720.005475][ T1106] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 720.022227][T17070] XFS (loop3): Ending clean mount [ 720.151343][T17070] XFS (loop3): Quotacheck needed: Please wait. [ 720.445680][T17070] XFS (loop3): Quotacheck: Done. [ 720.597913][ T1106] usb 3-1: config 0 has no interfaces? [ 720.603605][ T1106] usb 3-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 720.612788][ T4185] XFS (loop3): Unmounting Filesystem [ 720.654051][ T1106] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.736749][ T1106] usb 3-1: config 0 descriptor?? [ 721.126987][ T1106] usb 3-1: USB disconnect, device number 45 [ 722.268930][T17180] netlink: 'syz.4.5839': attribute type 1 has an invalid length. [ 722.396174][ T4248] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 722.681879][T17188] sctp: [Deprecated]: syz.3.5842 (pid 17188) Use of int in max_burst socket option deprecated. [ 722.681879][T17188] Use struct sctp_assoc_value instead [ 722.717443][ T4248] usb 3-1: Using ep0 maxpacket: 8 [ 722.943531][ T4979] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 723.148992][ T4248] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 723.163078][ T4248] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.194878][ T4248] usb 3-1: Product: syz [ 723.199175][ T4248] usb 3-1: Manufacturer: syz [ 723.204250][ T4248] usb 3-1: SerialNumber: syz [ 723.235760][ T4248] usb 3-1: config 0 descriptor?? [ 723.248430][ T4979] usb 5-1: Using ep0 maxpacket: 8 [ 723.304994][ T4248] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 723.345123][ T4248] usb 3-1: setting power ON [ 723.370768][ T4248] dvb-usb: bulk message failed: -22 (2/0) [ 723.383717][T17196] tap0: tun_chr_ioctl cmd 1074025677 [ 723.390694][T17196] tap0: linktype set to 6 [ 723.398845][ T4248] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 723.445990][ T4248] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 723.454518][ T4248] usb 3-1: media controller created [ 723.460266][ T4979] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 723.507631][T17176] dvb-usb: bulk message failed: -22 (3/0) [ 723.514457][T17176] cxusb: i2c rd: len=1792 is too big! [ 723.514457][T17176] [ 723.520815][ T4248] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 723.584054][ T4248] usb 3-1: selecting invalid altsetting 6 [ 723.598123][ T4248] usb 3-1: digital interface selection failed (-22) [ 723.616355][ T4248] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 723.672710][ T4979] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 723.688840][ T4979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.709142][ T4248] usb 3-1: setting power OFF [ 723.718739][ T4248] dvb-usb: bulk message failed: -22 (2/0) [ 723.725339][ T4248] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 723.737006][ T4979] usb 5-1: Product: syz [ 723.751316][ T4248] (NULL device *): no alternate interface [ 723.793112][ T4979] usb 5-1: Manufacturer: syz [ 723.814579][ T4248] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 723.834896][ T4979] usb 5-1: SerialNumber: syz [ 723.882320][ T4248] usb 3-1: USB disconnect, device number 46 [ 723.896389][ T4979] usb 5-1: config 0 descriptor?? [ 724.000380][ T4979] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 724.024880][ T4979] usb 5-1: setting power ON [ 724.034835][ T4979] dvb-usb: bulk message failed: -22 (2/0) [ 724.062564][ T4979] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 724.134215][ T4979] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 724.164847][ T4979] usb 5-1: media controller created [ 724.218465][T17186] dvb-usb: bulk message failed: -22 (3/0) [ 724.224269][T17186] dvb-usb: bulk message failed: -22 (5/0) [ 724.236823][ T4979] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 724.250317][T17186] cxusb: i2c rd: len=99 is too big! [ 724.250317][T17186] [ 724.358359][ T4979] usb 5-1: selecting invalid altsetting 6 [ 724.364177][ T4979] usb 5-1: digital interface selection failed (-22) [ 724.403732][ T4979] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 724.524564][ T4979] usb 5-1: setting power OFF [ 724.537528][ T4979] dvb-usb: bulk message failed: -22 (2/0) [ 724.543404][ T4979] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 724.578341][T17213] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5854'. [ 724.582643][ T4979] (NULL device *): no alternate interface [ 724.657862][ T4979] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 724.775492][ T4979] usb 5-1: USB disconnect, device number 27 [ 725.003665][T17220] loop4: detected capacity change from 0 to 256 [ 725.656394][T17233] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5863'. [ 725.894056][T17241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5867'. [ 726.028470][T17243] 8021q: adding VLAN 0 to HW filter on device bond2 [ 726.035132][ T4979] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 726.063602][T17243] bond0: (slave bond2): Enslaving as an active interface with an up link [ 726.326954][ T4979] usb 4-1: Using ep0 maxpacket: 32 [ 726.517644][ T4979] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 726.528836][ T4979] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.567174][ T4979] usb 4-1: config 0 descriptor?? [ 726.931015][ T26] audit: type=1804 audit(2000000490.924:62): pid=17220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.5857" name="/newroot/848/file0/file0" dev="loop4" ino=1048635 res=1 errno=0 [ 726.980334][ T4979] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 727.039639][ T4979] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 727.080306][ T4979] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 727.098320][ T4979] usb 4-1: media controller created [ 727.137171][ T4979] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 727.252820][ T4979] az6027: usb out operation failed. (-71) [ 727.284631][ T4979] az6027: usb out operation failed. (-71) [ 727.296680][ T4979] stb0899_attach: Driver disabled by Kconfig [ 727.302731][ T4979] az6027: no front-end attached [ 727.302731][ T4979] [ 727.380621][ T4979] az6027: usb out operation failed. (-71) [ 727.392180][ T4979] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 727.406538][ T4979] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input59 [ 727.456437][ T4979] dvb-usb: schedule remote query interval to 400 msecs. [ 727.490435][ T4979] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 727.567604][ T4979] usb 4-1: USB disconnect, device number 31 [ 727.811526][T17281] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5888'. [ 727.889526][ T4389] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 727.905972][ T4979] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 727.986472][T17285] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5889'. [ 728.041420][T17285] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5889'. [ 728.713051][ T4389] usb 3-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 728.726001][ T4389] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.774814][ T4389] usb 3-1: Product: syz [ 728.782064][ T4389] usb 3-1: Manufacturer: syz [ 728.814627][ T4389] usb 3-1: SerialNumber: syz [ 728.825754][ T4389] usb 3-1: config 0 descriptor?? [ 729.019136][T17298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5896'. [ 729.216126][T17302] ax25_connect(): syz.3.5897 uses autobind, please contact jreuter@yaina.de [ 729.228441][T17304] loop4: detected capacity change from 0 to 64 [ 729.787918][ T4389] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 729.799231][ T4389] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 729.830458][ T4389] asix: probe of 3-1:0.0 failed with error -71 [ 729.837746][T17320] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5906'. [ 729.871796][T17320] nbd: socks must be embedded in a SOCK_ITEM attr [ 729.913023][ T4389] usb 3-1: USB disconnect, device number 47 [ 732.025877][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 732.251701][T17351] netlink: 'syz.4.5920': attribute type 5 has an invalid length. [ 732.467213][T17353] loop4: detected capacity change from 0 to 1024 [ 732.694897][T17353] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 732.733727][T17353] ext4 filesystem being mounted at /852/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 733.743224][ T4389] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 733.818536][T17375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5931'. [ 734.101413][ T4389] usb 4-1: Using ep0 maxpacket: 8 [ 734.278331][ T4389] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 734.299307][ T4389] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 734.343836][ T4389] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.350428][T17386] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5936'. [ 734.394244][ T4389] usb 4-1: config 0 descriptor?? [ 734.624142][T14009] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 734.728907][ T4389] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 734.969933][ T4979] usb 4-1: USB disconnect, device number 32 [ 735.191963][T14009] usb 3-1: config 0 has an invalid interface number: 101 but max is 0 [ 735.214745][T14009] usb 3-1: config 0 has no interface number 0 [ 735.244573][T14009] usb 3-1: config 0 interface 101 has no altsetting 0 [ 735.493912][T14009] usb 3-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=4e.58 [ 735.570724][T14009] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.617399][T14009] usb 3-1: Product: syz [ 735.621706][T14009] usb 3-1: Manufacturer: syz [ 735.651999][T14009] usb 3-1: SerialNumber: syz [ 735.661813][T14009] usb 3-1: config 0 descriptor?? [ 736.056550][T14009] usb 3-1: selecting invalid altsetting 1 [ 736.062462][T14009] catc 3-1:0.101: Can't set altsetting 1. [ 736.090059][T14009] catc: probe of 3-1:0.101 failed with error -5 [ 736.155336][T14009] usb 3-1: USB disconnect, device number 48 [ 736.378123][T17426] syz.4.5954 (17426) used greatest stack depth: 20200 bytes left [ 736.423110][T17429] netlink: 'syz.1.5955': attribute type 1 has an invalid length. [ 736.477192][T17429] netlink: 'syz.1.5955': attribute type 2 has an invalid length. [ 736.543040][T17430] netlink: 'syz.1.5955': attribute type 1 has an invalid length. [ 736.625177][T17430] netlink: 'syz.1.5955': attribute type 2 has an invalid length. [ 736.686277][T17434] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5957'. [ 736.703301][T17408] loop3: detected capacity change from 0 to 32768 [ 736.758917][T17436] loop4: detected capacity change from 0 to 256 [ 737.494940][T17454] netlink: 'syz.0.5966': attribute type 15 has an invalid length. [ 739.763290][T17499] loop4: detected capacity change from 0 to 128 [ 739.930491][T17504] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5992'. [ 740.795997][T14009] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 741.259267][ T4248] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 741.408348][T14009] usb 3-1: config 0 has no interfaces? [ 741.542902][T17499] FAT-fs (loop4): bogus number of reserved sectors [ 741.564132][T17499] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 741.634377][T17499] FAT-fs (loop4): Can't find a valid FAT filesystem [ 741.656989][ T4248] usb 4-1: Using ep0 maxpacket: 8 [ 741.806817][T14009] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 741.833236][T14009] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.833308][ T4248] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 741.868644][T14009] usb 3-1: Product: syz [ 741.883579][T14009] usb 3-1: Manufacturer: syz [ 741.888360][T14009] usb 3-1: SerialNumber: syz [ 741.907460][ T4248] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 741.937043][ T4248] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.963770][T14009] usb 3-1: config 0 descriptor?? [ 741.976149][ T4248] usb 4-1: config 0 descriptor?? [ 742.302601][ T4248] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 742.303396][T14009] usb 3-1: USB disconnect, device number 49 [ 742.568699][ T4389] usb 4-1: USB disconnect, device number 33 [ 743.300624][T17555] netlink: 356 bytes leftover after parsing attributes in process `syz.2.6014'. [ 743.663823][T17562] hugetlbfs: syz.1.6017 (17562): Using mlock ulimits for SHM_HUGETLB is deprecated [ 744.159369][T17552] loop3: detected capacity change from 0 to 32768 [ 745.309312][T17611] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6042'. [ 745.325182][T17611] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6042'. [ 746.095048][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 746.113053][T17642] tun0: tun_chr_ioctl cmd 2148553947 [ 747.117920][ T4248] kernel write not supported for file /input/event2 (pid: 4248 comm: kworker/0:8) [ 747.352971][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.359419][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.670295][T17664] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6065'. [ 748.757960][ T4248] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 749.095165][ T4248] usb 3-1: Using ep0 maxpacket: 32 [ 749.267288][ T4248] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 749.282951][ T4248] usb 3-1: config 0 has no interface number 0 [ 749.294923][ T4248] usb 3-1: config 0 interface 184 has no altsetting 0 [ 749.443123][T17681] Non-string source [ 749.576387][ T4248] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 749.591489][ T4248] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.625744][ T4248] usb 3-1: Product: syz [ 749.649599][ T4248] usb 3-1: Manufacturer: syz [ 749.670322][ T4248] usb 3-1: SerialNumber: syz [ 749.722773][T17685] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6073'. [ 749.752100][ T4248] usb 3-1: config 0 descriptor?? [ 749.866352][ T4248] smsc75xx v1.0.0 [ 749.993179][ T1346] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 750.040521][T17692] program syz.1.6077 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 750.558846][ T1346] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 750.560798][ T4248] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 750.575780][ T1346] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 750.618937][ T4248] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 750.642731][ T1346] usb 4-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 750.676116][ T1346] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.676197][ T4248] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 750.729151][ T1346] usb 4-1: config 0 descriptor?? [ 750.753290][T17707] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6083'. [ 750.762922][ T4248] smsc75xx: probe of 3-1:0.184 failed with error -71 [ 750.791164][T17707] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6083'. [ 750.823665][ T4248] usb 3-1: USB disconnect, device number 50 [ 750.893909][T17708] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6083'. [ 750.912529][T17708] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6083'. [ 751.187303][T17716] program syz.2.6086 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 751.278230][ T1346] bigben 0003:146B:0902.003E: unexpected rdesc, please submit for review [ 751.293052][ T1346] bigben 0003:146B:0902.003E: item fetching failed at offset 2/5 [ 751.316604][ T1346] bigben 0003:146B:0902.003E: parse failed [ 751.345884][ T1346] bigben: probe of 0003:146B:0902.003E failed with error -22 [ 751.503635][T14009] usb 4-1: USB disconnect, device number 34 [ 752.241440][T17738] loop4: detected capacity change from 0 to 256 [ 753.787199][T17779] netlink: 148 bytes leftover after parsing attributes in process `syz.3.6114'. [ 753.969570][T17738] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0xd9d80cab, utbl_chksum : 0xe619d30d) [ 754.246254][T17791] loop3: detected capacity change from 0 to 8 [ 754.413847][T17793] loop4: detected capacity change from 0 to 2048 [ 754.631521][T17791] SQUASHFS error: Unknown inode type 1078 in squashfs_iget! [ 754.822533][T17791] blk_update_request: I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 754.870093][T17791] EXT4-fs (loop3): unable to read superblock [ 755.752857][ T26] audit: type=1326 audit(2000000519.757:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17823 comm="syz.2.6135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64d84eabe9 code=0x7ffc0000 [ 755.817595][ T26] audit: type=1326 audit(2000000519.777:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17823 comm="syz.2.6135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64d84eabe9 code=0x7ffc0000 [ 755.892605][ T26] audit: type=1326 audit(2000000519.787:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17823 comm="syz.2.6135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f64d84eabe9 code=0x7ffc0000 [ 755.973171][ T26] audit: type=1326 audit(2000000519.787:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17823 comm="syz.2.6135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64d84eabe9 code=0x7ffc0000 [ 756.050997][ T26] audit: type=1326 audit(2000000519.787:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17823 comm="syz.2.6135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64d84eabe9 code=0x7ffc0000 [ 756.132673][T17836] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6140'. [ 756.910520][T17849] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 757.712056][T17867] team0: Device ip6gre1 is of different type [ 758.164679][T17854] loop3: detected capacity change from 0 to 40427 [ 758.503709][T17854] F2FS-fs (loop3): Found nat_bits in checkpoint [ 758.624999][T17854] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 758.675651][T17877] sp0: Synchronizing with TNC [ 758.695735][T17854] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 758.830204][T17854] attempt to access beyond end of device [ 758.830204][T17854] loop3: rw=10241, want=45104, limit=40427 [ 758.948593][ T4185] attempt to access beyond end of device [ 758.948593][ T4185] loop3: rw=2049, want=45112, limit=40427 [ 758.951239][ T1346] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 759.520894][ T1346] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 759.531317][ T1346] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 759.743838][ T1346] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 759.761087][ T1346] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.779030][ T1346] usb 3-1: Product: syz [ 759.783606][ T1346] usb 3-1: Manufacturer: syz [ 759.788244][ T1346] usb 3-1: SerialNumber: syz [ 759.931777][T17884] loop4: detected capacity change from 0 to 32768 [ 760.194490][T17884] JBD2: Ignoring recovery information on journal [ 760.353167][ T1346] usb 3-1: 0:2 : does not exist [ 760.398681][T17884] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 760.697857][ T4195] ocfs2: Unmounting device (7,4) on (node local) [ 760.861057][ T1346] usb 3-1: USB disconnect, device number 51 [ 761.398254][ T4979] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 761.703899][ T4537] udevd[4537]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 761.786501][ T4979] usb 5-1: Using ep0 maxpacket: 16 [ 762.034275][ T4979] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 762.056953][ T4979] usb 5-1: config 0 interface 0 has no altsetting 0 [ 762.105535][T17877] Falling back ldisc for ptm0. [ 762.136347][ T4979] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 762.200789][ T4979] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.244282][ T4979] usb 5-1: config 0 descriptor?? [ 762.824472][ T4979] cougar 0003:060B:500A.003F: unexpected long global item [ 762.888520][ T4979] cougar 0003:060B:500A.003F: parse failed [ 762.901496][ T4979] cougar: probe of 0003:060B:500A.003F failed with error -22 [ 763.047656][ T4248] usb 5-1: USB disconnect, device number 28 [ 764.177421][T17915] loop3: detected capacity change from 0 to 32768 [ 765.065490][T17915] JBD2: Ignoring recovery information on journal [ 765.404749][T17915] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 765.600727][ T4185] ocfs2: Unmounting device (7,3) on (node local) [ 765.936717][T17923] loop4: detected capacity change from 0 to 32768 [ 766.233079][T17958] input: syz0 as /devices/virtual/input/input61 [ 766.562057][T17923] XFS (loop4): Mounting V5 Filesystem [ 766.944452][T17976] loop3: detected capacity change from 0 to 1024 [ 767.415622][T17995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6202'. [ 767.747373][T17976] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 769.019064][T18037] loop3: detected capacity change from 0 to 1764 [ 769.417187][T17923] XFS (loop4): Ending clean mount [ 769.470555][T17923] XFS (loop4): Quotacheck needed: Please wait. [ 769.633366][T17923] XFS (loop4): Quotacheck: Done. [ 769.759228][ T4195] XFS (loop4): Unmounting Filesystem [ 770.199292][ T144] Bluetooth: hci5: Frame reassembly failed (-84) [ 770.866550][T18046] loop4: detected capacity change from 0 to 64 [ 770.885121][T18048] loop3: detected capacity change from 0 to 2048 [ 771.048002][T18046] minix_free_block (loop4:21): bit already cleared [ 771.704269][ T1106] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 771.862118][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 771.867264][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 771.872320][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #30a!!! [ 771.889797][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 771.898877][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 771.910607][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 771.920173][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 771.929901][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 771.936085][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 771.939239][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 772.128948][ T1106] usb 4-1: Using ep0 maxpacket: 32 [ 772.231296][ T4248] Bluetooth: hci5: command 0x1003 tx timeout [ 772.238649][ T4196] Bluetooth: hci5: sending frame failed (-49) [ 772.340581][ T1106] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 772.398538][ T1106] usb 4-1: config 0 has no interface number 0 [ 772.401809][T18064] program syz.2.6235 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 772.622744][ T1106] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 772.648610][ T1106] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.684623][ T1106] usb 4-1: Product: syz [ 772.689331][ T1106] usb 4-1: Manufacturer: syz [ 772.716568][ T1106] usb 4-1: SerialNumber: syz [ 772.736575][ T1106] usb 4-1: config 0 descriptor?? [ 772.811069][ T1106] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 772.978173][T18050] loop4: detected capacity change from 0 to 2048 [ 773.045942][ T1106] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 773.096323][ T1106] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 773.162445][T18050] UDF-fs: iocharset defauovrs not found [ 773.184075][T18050] schedule_timeout: wrong timeout value fffd0a900a742175 [ 773.197418][T18050] CPU: 0 PID: 18050 Comm: syz.4.6228 Not tainted 5.15.189-syzkaller #0 [ 773.206031][T18050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 773.216426][T18050] Call Trace: [ 773.219739][T18050] [ 773.222695][T18050] dump_stack_lvl+0x168/0x230 [ 773.227592][T18050] ? show_regs_print_info+0x20/0x20 [ 773.232831][T18050] ? load_image+0x3b0/0x3b0 [ 773.237506][T18050] ? preempt_schedule_common+0xa5/0xd0 [ 773.243464][T18050] ? preempt_schedule+0xa7/0xb0 [ 773.248531][T18050] ? schedule_preempt_disabled+0x20/0x20 [ 773.254272][T18050] ? lock_chain_count+0x20/0x20 [ 773.259166][T18050] schedule_timeout+0x20a/0x280 [ 773.264188][T18050] ? console_conditional_schedule+0x40/0x40 [ 773.270122][T18050] ? _local_bh_enable+0xa0/0xa0 [ 773.275015][T18050] ? release_sock+0x2b/0x1b0 [ 773.279942][T18050] vsock_connect+0x3d0/0xcf0 [ 773.284573][T18050] ? vsock_auto_bind+0xf0/0xf0 [ 773.289443][T18050] ? aa_af_perm+0x2b0/0x2b0 [ 773.293964][T18050] ? init_wait_entry+0xd0/0xd0 [ 773.298948][T18050] ? bpf_lsm_socket_connect+0x5/0x10 [ 773.304334][T18050] ? security_socket_connect+0x7c/0xa0 [ 773.309833][T18050] ? vsock_auto_bind+0xf0/0xf0 [ 773.314696][T18050] __sys_connect+0x389/0x410 [ 773.319298][T18050] ? __sys_connect_file+0x170/0x170 [ 773.324511][T18050] ? vtime_user_exit+0x2dc/0x400 [ 773.329560][T18050] __x64_sys_connect+0x76/0x80 [ 773.334453][T18050] do_syscall_64+0x4c/0xa0 [ 773.339097][T18050] ? clear_bhb_loop+0x30/0x80 [ 773.343795][T18050] ? clear_bhb_loop+0x30/0x80 [ 773.348768][T18050] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 773.354775][T18050] RIP: 0033:0x7fb9c00f5be9 [ 773.359305][T18050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 773.379572][T18050] RSP: 002b:00007fb9be35d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 773.388064][T18050] RAX: ffffffffffffffda RBX: 00007fb9c031cfa0 RCX: 00007fb9c00f5be9 [ 773.396141][T18050] RDX: 0000000000000010 RSI: 0000200000001240 RDI: 0000000000000003 [ 773.404214][T18050] RBP: 00007fb9c0178e19 R08: 0000000000000000 R09: 0000000000000000 [ 773.412300][T18050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 773.420471][T18050] R13: 00007fb9c031d038 R14: 00007fb9c031cfa0 R15: 00007ffe27d54a28 [ 773.428628][T18050] [ 773.697181][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 773.749909][ T1346] usb 4-1: USB disconnect, device number 35 [ 773.759124][ T1346] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 773.805594][ T1346] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 773.870525][ T1346] quatech2 4-1:0.51: device disconnected [ 774.323763][ T4979] Bluetooth: hci5: command 0x1001 tx timeout [ 774.331009][ T4196] Bluetooth: hci5: sending frame failed (-49) [ 775.892573][T18082] loop3: detected capacity change from 0 to 32768 [ 776.305953][T18082] JBD2: Ignoring recovery information on journal [ 776.395047][ T4248] Bluetooth: hci5: command 0x1009 tx timeout [ 776.520071][T18082] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 776.899604][T18082] overlayfs: upper fs does not support tmpfile. [ 776.927822][T18113] program syz.0.6263 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 777.016060][T18082] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 777.133044][T18082] overlayfs: upper fs missing required features. [ 777.367742][ T4979] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 777.459872][ T4248] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 777.483924][ T4185] ocfs2: Unmounting device (7,3) on (node local) [ 777.695651][ T4979] usb 3-1: Using ep0 maxpacket: 16 [ 777.783064][ T4248] usb 5-1: Using ep0 maxpacket: 32 [ 777.854925][ T4979] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 777.870366][ T4979] usb 3-1: config 0 interface 0 has no altsetting 0 [ 777.877218][ T4979] usb 3-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 777.913669][ T4979] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.937766][ T4979] usb 3-1: config 0 descriptor?? [ 777.990805][ T4248] usb 5-1: unable to get BOS descriptor or descriptor too short [ 778.090043][ T4248] usb 5-1: config 5 has an invalid interface number: 54 but max is 0 [ 778.098362][ T4248] usb 5-1: config 5 has no interface number 0 [ 778.122677][ T4248] usb 5-1: config 5 interface 54 has no altsetting 0 [ 778.340210][ T4248] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0306, bcdDevice=ba.7e [ 778.350030][ T4248] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.364732][ T4248] usb 5-1: Product: syz [ 778.374712][ T4248] usb 5-1: Manufacturer: syz [ 778.401512][ T4248] usb 5-1: SerialNumber: syz [ 778.466386][ T4979] cougar 0003:060B:500A.0040: unexpected long global item [ 778.496436][ T4979] cougar 0003:060B:500A.0040: parse failed [ 778.508628][ T4979] cougar: probe of 0003:060B:500A.0040 failed with error -22 [ 778.713203][ T4979] usb 3-1: USB disconnect, device number 52 [ 779.046776][ T4248] qmi_wwan 5-1:5.54: bogus CDC Union: master=0, slave=1 [ 779.134398][ T4248] qmi_wwan: probe of 5-1:5.54 failed with error -22 [ 779.170280][ T4248] usb 5-1: USB disconnect, device number 29 [ 779.950696][T18132] loop4: detected capacity change from 0 to 8192 [ 781.392193][ T4389] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 781.521587][T18167] program syz.0.6279 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 781.617031][T18148] loop3: detected capacity change from 0 to 32768 [ 781.735622][ T4389] usb 3-1: Using ep0 maxpacket: 32 [ 781.962179][T18132] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 781.988948][ T4389] usb 3-1: unable to get BOS descriptor or descriptor too short [ 781.999176][T18132] REISERFS (device loop4): using ordered data mode [ 782.077132][T18132] reiserfs: using flush barriers [ 782.094325][ T4389] usb 3-1: config 5 has an invalid interface number: 54 but max is 0 [ 782.117631][ T4389] usb 3-1: config 5 has no interface number 0 [ 782.173786][T18132] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 782.178444][ T4389] usb 3-1: config 5 interface 54 has no altsetting 0 [ 782.221795][T18132] REISERFS (device loop4): checking transaction log (loop4) [ 782.374940][T18132] REISERFS (device loop4): Using r5 hash to sort names [ 782.388745][T18132] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 782.448268][T18132] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 782.538273][ T4389] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0306, bcdDevice=ba.7e [ 782.568375][ T4389] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.593189][ T4389] usb 3-1: Product: syz [ 782.597517][ T4389] usb 3-1: Manufacturer: syz [ 782.629755][ T4389] usb 3-1: SerialNumber: syz [ 782.692958][T18186] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 783.226760][ T4389] qmi_wwan 3-1:5.54: bogus CDC Union: master=0, slave=1 [ 783.336861][ T4389] qmi_wwan: probe of 3-1:5.54 failed with error -22 [ 783.421968][ T4389] usb 3-1: USB disconnect, device number 53 [ 784.008627][T18191] loop4: detected capacity change from 0 to 1024 [ 784.073607][T18202] loop3: detected capacity change from 0 to 4096 [ 784.739823][T18191] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 785.093531][T18223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6300'. [ 785.523058][T18231] tipc: New replicast peer: 255.255.255.255 [ 785.544203][T18231] tipc: Enabled bearer , priority 10 [ 786.267631][T18252] program syz.4.6315 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 786.329033][T18221] overlayfs: failed to resolve './file1': -2 [ 786.355808][T18254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6317'. [ 786.506330][T18259] nr0: tun_chr_ioctl cmd 1074025677 [ 786.551117][T18259] nr0: linktype set to 1 [ 786.878312][T18202] NILFS (loop3): error -4 creating segctord thread [ 786.895050][T18266] vxcan0: tx address claim with dlc 0 [ 787.888361][T18281] program syz.2.6329 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 788.872018][T18306] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6342'. [ 788.954059][T18308] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6343'. [ 790.025792][T18298] loop3: detected capacity change from 0 to 32768 [ 791.068418][T18363] program syz.4.6366 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 791.232937][T18368] program syz.0.6380 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 793.397388][T18357] loop3: detected capacity change from 0 to 1024 [ 793.717492][T18424] netlink: 'syz.2.6396': attribute type 1 has an invalid length. [ 793.769352][T18425] sctp: [Deprecated]: syz.4.6394 (pid 18425) Use of int in max_burst socket option deprecated. [ 793.769352][T18425] Use struct sctp_assoc_value instead [ 795.175676][T18457] loop3: detected capacity change from 0 to 128 [ 795.869735][T18476] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6421'. [ 796.424495][T18480] 8021q: adding VLAN 0 to HW filter on device bond2 [ 796.458743][T18480] bond0: (slave bond2): Enslaving as an active interface with an up link [ 796.908920][T18499] loop4: detected capacity change from 0 to 128 [ 796.915972][T18495] sctp: [Deprecated]: syz.0.6429 (pid 18495) Use of int in max_burst socket option deprecated. [ 796.915972][T18495] Use struct sctp_assoc_value instead [ 797.327934][T18510] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6435'. [ 797.376871][T18510] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6435'. [ 797.646620][ T1346] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 797.897716][ T1346] usb 3-1: Using ep0 maxpacket: 8 [ 797.960150][T18538] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6451'. [ 798.016998][ T1346] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 798.085304][T18544] sctp: [Deprecated]: syz.1.6449 (pid 18544) Use of int in max_burst socket option deprecated. [ 798.085304][T18544] Use struct sctp_assoc_value instead [ 798.206654][ T1346] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 798.233426][ T1346] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.274698][ T1346] usb 3-1: Product: syz [ 798.296570][ T1346] usb 3-1: Manufacturer: syz [ 798.316882][ T1346] usb 3-1: SerialNumber: syz [ 798.334381][ T1346] usb 3-1: config 0 descriptor?? [ 798.382744][T18556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6457'. [ 798.413668][ T1346] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 798.442303][ T1346] usb 3-1: setting power ON [ 798.457473][ T1346] dvb-usb: bulk message failed: -22 (2/0) [ 798.489959][ T1346] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 798.510681][T18558] 8021q: adding VLAN 0 to HW filter on device bond1 [ 798.538977][T18558] bond0: (slave bond1): Enslaving as an active interface with an up link [ 798.587372][ T1346] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 798.602876][ T1346] usb 3-1: media controller created [ 798.616026][T18512] dvb-usb: bulk message failed: -22 (3/0) [ 798.634030][T18536] loop3: detected capacity change from 0 to 32768 [ 798.634349][T18563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6460'. [ 798.648053][T18512] dvb-usb: bulk message failed: -22 (5/0) [ 798.657711][T18536] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.6450 (18536) [ 798.683346][T18512] cxusb: i2c rd: len=99 is too big! [ 798.683346][T18512] [ 798.722717][ T1346] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 798.857063][ T1346] usb 3-1: selecting invalid altsetting 6 [ 798.863000][ T1346] usb 3-1: digital interface selection failed (-22) [ 798.894824][ T1346] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 798.946820][ T1346] usb 3-1: setting power OFF [ 798.953923][ T1346] dvb-usb: bulk message failed: -22 (2/0) [ 798.967798][ T1346] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 798.978914][T18570] loop4: detected capacity change from 0 to 256 [ 798.998196][ T1346] (NULL device *): no alternate interface [ 799.031241][ T1346] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 799.057510][T18570] exfat: Deprecated parameter 'namecase' [ 799.060527][ T1346] usb 3-1: USB disconnect, device number 54 [ 799.065420][T18570] exfat: Deprecated parameter 'utf8' [ 799.076184][T18536] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 799.091769][T18536] BTRFS info (device loop3): force clearing of disk cache [ 799.100932][T18536] BTRFS info (device loop3): enabling ssd optimizations [ 799.135172][T18570] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 799.182159][T18536] BTRFS info (device loop3): using spread ssd allocation scheme [ 799.228173][T18536] BTRFS info (device loop3): using free space tree [ 799.271571][T18536] BTRFS info (device loop3): has skinny extents [ 799.332493][T18577] ax25_connect(): syz.1.6477 uses autobind, please contact jreuter@yaina.de [ 799.506801][T18590] tap0: tun_chr_ioctl cmd 1074025677 [ 799.513014][T18590] tap0: linktype set to 6 [ 799.592821][T18536] BTRFS info (device loop3): clearing free space tree [ 799.607910][T18536] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 799.624092][T18536] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 799.641408][T18536] BTRFS info (device loop3): creating free space tree [ 799.656779][T18536] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 799.681709][T18536] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 800.227438][T18616] sctp: [Deprecated]: syz.2.6471 (pid 18616) Use of int in max_burst socket option deprecated. [ 800.227438][T18616] Use struct sctp_assoc_value instead [ 800.776447][T18648] 8021q: adding VLAN 0 to HW filter on device bond1 [ 800.817334][T18653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6486'. [ 800.828512][T18648] bond0: (slave bond1): Enslaving as an active interface with an up link [ 801.062264][T18651] loop4: detected capacity change from 0 to 32768 [ 801.112169][ T4425] loop4: p1 p3 < p5 p6 > [ 801.141908][T18651] loop4: p1 p3 < p5 p6 > [ 801.186322][ T1346] usb 3-1: new low-speed USB device number 55 using dummy_hcd [ 801.236520][ T1106] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 801.306627][ T4978] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 801.546473][ T1346] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 801.557635][ T1346] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 801.567625][ T1346] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 801.582582][ T1346] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 801.592243][ T1346] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.601552][ T1106] usb 5-1: unable to get BOS descriptor or descriptor too short [ 801.646502][T18657] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 801.667517][ T1346] hub 3-1:1.0: bad descriptor, ignoring hub [ 801.673491][ T1346] hub: probe of 3-1:1.0 failed with error -5 [ 801.684984][ T1346] cdc_wdm 3-1:1.0: skipping garbage [ 801.686565][ T4978] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 801.691757][ T1346] cdc_wdm 3-1:1.0: skipping garbage [ 801.701815][ T4978] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 801.718690][ T1346] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 801.724815][ T1346] cdc_wdm 3-1:1.0: Unknown control protocol [ 801.746469][ T1106] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 801.754454][ T1106] usb 5-1: can't read configurations, error -71 [ 801.813024][ T4978] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 801.828261][ T4978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 801.842691][ T4978] usb 4-1: SerialNumber: syz [ 802.014198][T18670] netlink: 'syz.1.6493': attribute type 5 has an invalid length. [ 802.064397][T18674] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6494'. [ 802.121850][T18674] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6494'. [ 802.139211][ T4978] usb 4-1: 0:2 : does not exist [ 802.225403][ T4978] usb 4-1: USB disconnect, device number 36 [ 802.292137][T18680] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6508'. [ 802.463921][T18685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6500'. [ 802.577960][ T4425] udevd[4425]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 802.725342][T18691] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6512'. [ 802.740096][T18691] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6512'. [ 802.754561][T18693] loop3: detected capacity change from 0 to 1024 [ 802.866242][ T1106] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 802.925594][T18693] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 803.080446][T18697] sctp: [Deprecated]: syz.1.6504 (pid 18697) Use of int in max_burst socket option deprecated. [ 803.080446][T18697] Use struct sctp_assoc_value instead [ 803.105962][ T1106] usb 5-1: Using ep0 maxpacket: 32 [ 803.226304][ T1106] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 803.242719][ T1106] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.290435][ T1106] usb 5-1: config 0 descriptor?? [ 803.561685][ T1106] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 803.582509][ T1106] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 803.610807][T18722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6515'. [ 803.636830][ T1106] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 803.650384][ T1106] usb 5-1: media controller created [ 803.677955][ T1106] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 803.775998][ T1106] az6027: usb out operation failed. (-71) [ 803.806165][ T1106] az6027: usb out operation failed. (-71) [ 803.816255][ T1106] stb0899_attach: Driver disabled by Kconfig [ 803.830744][ T1106] az6027: no front-end attached [ 803.830744][ T1106] [ 803.859950][ T1106] az6027: usb out operation failed. (-71) [ 803.893559][ T1106] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 803.910543][ T1106] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input63 [ 803.952821][ T1106] dvb-usb: schedule remote query interval to 400 msecs. [ 803.975878][ T1106] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 803.988771][T18730] tap0: tun_chr_ioctl cmd 1074025677 [ 803.994972][T18730] tap0: linktype set to 6 [ 804.003599][ T1106] usb 5-1: USB disconnect, device number 31 [ 804.115434][ T1106] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 804.420218][T18737] loop4: detected capacity change from 0 to 1024 [ 804.481680][T18736] loop3: detected capacity change from 0 to 8192 [ 804.563727][T18736] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 804.578017][T18737] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 804.610454][T18736] REISERFS (device loop3): using ordered data mode [ 804.637220][T18736] reiserfs: using flush barriers [ 804.669132][T18736] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 804.722980][T18748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6526'. [ 804.727088][T18736] REISERFS (device loop3): checking transaction log (loop3) [ 804.773598][T18736] REISERFS (device loop3): Using r5 hash to sort names [ 804.847579][T18736] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 806.331867][T18657] cdc_wdm 3-1:1.0: Error autopm - -16 [ 806.332106][ T4248] usb 3-1: USB disconnect, device number 55 [ 806.861482][T18780] 8021q: adding VLAN 0 to HW filter on device bond3 [ 806.872071][T18787] ax25_connect(): syz.0.6539 uses autobind, please contact jreuter@yaina.de [ 806.911159][T18780] bond0: (slave bond3): Enslaving as an active interface with an up link [ 807.023717][T18793] netlink: 'syz.3.6543': attribute type 1 has an invalid length. [ 807.041891][T18793] netlink: 'syz.3.6543': attribute type 2 has an invalid length. [ 807.067684][T18793] netlink: 'syz.3.6543': attribute type 1 has an invalid length. [ 807.095967][ T4248] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 807.134794][T18793] netlink: 'syz.3.6543': attribute type 2 has an invalid length. [ 807.266604][ T1346] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 807.356866][ T4248] usb 3-1: Using ep0 maxpacket: 32 [ 807.409757][T18805] loop3: detected capacity change from 0 to 64 [ 807.475929][ T4248] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 807.510309][ T4248] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.525610][ T1346] usb 5-1: Using ep0 maxpacket: 8 [ 807.545194][ T4248] usb 3-1: config 0 descriptor?? [ 807.820248][ T4248] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 807.835975][ T1346] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 807.852083][ T4248] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 807.853341][ T1346] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.886260][ T4248] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 807.894632][ T4248] usb 3-1: media controller created [ 807.912909][ T4248] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 807.921993][ T1346] usb 5-1: Product: syz [ 807.934776][ T1346] usb 5-1: Manufacturer: syz [ 807.940449][ T1346] usb 5-1: SerialNumber: syz [ 807.952801][ T1346] usb 5-1: config 0 descriptor?? [ 808.007851][ T1346] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 808.016969][ T1346] usb 5-1: setting power ON [ 808.021835][ T1346] dvb-usb: bulk message failed: -22 (2/0) [ 808.035915][ T4248] az6027: usb out operation failed. (-71) [ 808.042085][ T1346] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 808.075567][ T4248] az6027: usb out operation failed. (-71) [ 808.081885][ T4248] stb0899_attach: Driver disabled by Kconfig [ 808.082006][ T1346] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 808.102224][ T4248] az6027: no front-end attached [ 808.102224][ T4248] [ 808.105619][ T1346] usb 5-1: media controller created [ 808.133726][ T1346] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 808.145422][ T4248] az6027: usb out operation failed. (-71) [ 808.153110][ T4248] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 808.164462][ T1346] usb 5-1: selecting invalid altsetting 6 [ 808.173899][ T4248] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input64 [ 808.205572][ T1346] usb 5-1: digital interface selection failed (-22) [ 808.237592][ T4248] dvb-usb: schedule remote query interval to 400 msecs. [ 808.245496][ T1346] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 808.255001][ T4248] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 808.298317][ T4248] usb 3-1: USB disconnect, device number 56 [ 808.306087][ T1346] usb 5-1: setting power OFF [ 808.310844][ T1346] dvb-usb: bulk message failed: -22 (2/0) [ 808.333262][ T1346] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 808.355018][ T1346] (NULL device *): no alternate interface [ 808.405737][ T1106] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 808.416473][ T4248] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 808.422382][ T1346] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 808.459751][ T1346] usb 5-1: USB disconnect, device number 32 [ 808.777411][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 808.786465][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.792913][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.825443][ T1106] usb 4-1: config 0 has an invalid interface number: 101 but max is 0 [ 808.845763][ T1106] usb 4-1: config 0 has no interface number 0 [ 808.852130][ T1106] usb 4-1: config 0 interface 101 has no altsetting 0 [ 808.991111][T18857] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6574'. [ 809.085728][ T1106] usb 4-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=4e.58 [ 809.100066][ T1106] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.140024][ T1106] usb 4-1: Product: syz [ 809.155672][ T1106] usb 4-1: Manufacturer: syz [ 809.175484][ T1106] usb 4-1: SerialNumber: syz [ 809.196350][ T1106] usb 4-1: config 0 descriptor?? [ 809.510668][ T1106] usb 4-1: selecting invalid altsetting 1 [ 809.519723][ T1106] catc 4-1:0.101: Can't set altsetting 1. [ 809.538636][ T1106] catc: probe of 4-1:0.101 failed with error -5 [ 809.576897][ T1106] usb 4-1: USB disconnect, device number 37 [ 809.833060][T18903] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6596'. [ 810.168199][T18920] loop3: detected capacity change from 0 to 2048 [ 810.274326][T18920] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 810.348812][T18920] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 1376) has entry at pos 232 with incorrect tag 0 [ 810.406637][T18930] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 1376) has entry at pos 232 with incorrect tag 0 [ 810.881251][T18957] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6620'. [ 811.205602][ T1106] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 811.635509][ T1106] usb 5-1: config 0 has an invalid interface number: 101 but max is 0 [ 811.651455][ T1106] usb 5-1: config 0 has no interface number 0 [ 811.686815][ T1106] usb 5-1: config 0 interface 101 has no altsetting 0 [ 811.722037][T18993] loop3: detected capacity change from 0 to 256 [ 811.875173][ T1106] usb 5-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=4e.58 [ 811.884461][ T1106] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.921495][ T1106] usb 5-1: Product: syz [ 811.932132][ T1106] usb 5-1: Manufacturer: syz [ 811.940488][ T1106] usb 5-1: SerialNumber: syz [ 812.003942][ T1106] usb 5-1: config 0 descriptor?? [ 812.345758][ T1106] usb 5-1: selecting invalid altsetting 1 [ 812.351904][ T1106] catc 5-1:0.101: Can't set altsetting 1. [ 812.360748][ T1106] catc: probe of 5-1:0.101 failed with error -5 [ 812.380759][ T1106] usb 5-1: USB disconnect, device number 33 [ 812.551339][T19014] loop3: detected capacity change from 0 to 32768 [ 812.594342][ T26] audit: type=1800 audit(2000000576.594:68): pid=19014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6646" name="file1" dev="loop3" ino=7 res=0 errno=0 [ 813.735408][T19064] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6668'. [ 813.866853][T19071] tun0: tun_chr_ioctl cmd 2148553947 [ 813.931355][T19076] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6673'. [ 814.242031][T19091] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6691'. [ 814.660909][T19080] loop3: detected capacity change from 0 to 32768 [ 814.743036][T19111] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6687'. [ 814.754047][T19111] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6687'. [ 814.782824][T19111] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6687'. [ 814.796055][T19111] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6687'. [ 815.085837][T19117] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6694'. [ 815.375417][T19126] program syz.4.6697 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 815.417065][T19132] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6696'. [ 815.670515][T19138] loop3: detected capacity change from 0 to 2048 [ 815.758044][T19138] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000004,usrjquota=,errors=remount-ro,dioread_lock,max_batch_time=0x0000000000000005,sysvgroups,minixdf,barrier=0x0000000000000000,nombcache,bsddf,. Quota mode: none. [ 816.328528][ T1106] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 816.594888][ T1106] usb 3-1: Using ep0 maxpacket: 8 [ 816.709053][T19184] loop4: detected capacity change from 0 to 2048 [ 816.734897][ T1106] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 816.747418][ T1106] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 816.758128][ T1106] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.777432][ T1106] usb 3-1: config 0 descriptor?? [ 816.794700][T19184] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000004,usrjquota=,errors=remount-ro,dioread_lock,max_batch_time=0x0000000000000005,sysvgroups,minixdf,barrier=0x0000000000000000,nombcache,bsddf,. Quota mode: none. [ 817.061287][ T1106] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 817.065321][T19190] tun0: tun_chr_ioctl cmd 2148553947 [ 817.316626][ T1106] usb 3-1: USB disconnect, device number 57 [ 817.324716][ T4979] kernel write not supported for file /input/event2 (pid: 4979 comm: kworker/0:16) [ 817.535334][T19213] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6732'. [ 817.621147][T19215] loop4: detected capacity change from 0 to 8192 [ 817.717007][T19215] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 817.733067][T19215] REISERFS (device loop4): using ordered data mode [ 817.754656][T19215] reiserfs: using flush barriers [ 817.772457][T19215] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 817.790566][T19215] REISERFS (device loop4): checking transaction log (loop4) [ 817.812164][T19215] REISERFS (device loop4): Using r5 hash to sort names [ 817.844093][T19215] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 817.896640][T19226] Non-string source [ 818.246261][ T26] audit: type=1326 audit(2000000582.255:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19240 comm="syz.4.6744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9c00f5be9 code=0x7ffc0000 [ 818.286849][T19236] loop3: detected capacity change from 0 to 4096 [ 818.295660][ T26] audit: type=1326 audit(2000000582.255:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19240 comm="syz.4.6744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9c00f5be9 code=0x7ffc0000 [ 818.338156][ T26] audit: type=1326 audit(2000000582.265:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19240 comm="syz.4.6744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7fb9c00f5be9 code=0x7ffc0000 [ 818.361906][T19236] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 818.375189][ T26] audit: type=1326 audit(2000000582.265:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19240 comm="syz.4.6744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9c00f5be9 code=0x7ffc0000 [ 818.404696][ T26] audit: type=1326 audit(2000000582.265:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19240 comm="syz.4.6744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9c00f5be9 code=0x7ffc0000 [ 818.840838][T19262] loop3: detected capacity change from 0 to 8192 [ 818.870441][T19262] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 818.882423][T19262] REISERFS (device loop3): using ordered data mode [ 818.891528][T19262] reiserfs: using flush barriers [ 818.906563][T19262] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 818.931436][T19262] REISERFS (device loop3): checking transaction log (loop3) [ 818.958464][T19262] REISERFS (device loop3): Using r5 hash to sort names [ 818.967406][T19262] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 819.059578][T14009] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 819.086924][T19267] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6760'. [ 819.101964][T19267] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6760'. [ 819.334400][T14009] usb 5-1: Using ep0 maxpacket: 8 [ 819.405262][T19281] loop3: detected capacity change from 0 to 2048 [ 819.465022][T14009] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 819.480686][T14009] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 819.491700][T14009] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.516702][T14009] usb 5-1: config 0 descriptor?? [ 819.733043][T19289] __nla_validate_parse: 2 callbacks suppressed [ 819.733056][T19289] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6770'. [ 819.786978][T14009] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 820.017328][T14009] usb 5-1: USB disconnect, device number 34 [ 820.322406][T19310] loop3: detected capacity change from 0 to 2048 [ 820.401048][T19311] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 820.497830][T19310] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 820.587023][T19310] Remounting filesystem read-only [ 820.657003][T19310] NILFS (loop3): error -2 truncating bmap (ino=16) [ 820.863944][ T4185] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 821.642789][T19322] loop4: detected capacity change from 0 to 32768 [ 821.661654][T19336] loop3: detected capacity change from 0 to 4096 [ 821.753554][ T26] audit: type=1800 audit(2000000585.755:74): pid=19322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6784" name="file1" dev="loop4" ino=7 res=0 errno=0 [ 821.775280][ C1] vkms_vblank_simulate: vblank timer overrun [ 822.083765][ T4979] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 822.278975][T19350] loop3: detected capacity change from 0 to 4096 [ 822.363732][ T4979] usb 3-1: Using ep0 maxpacket: 8 [ 822.483893][ T4979] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 822.516316][ T4979] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 822.529214][T19363] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 822.542812][ T4979] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.574927][ T4979] usb 3-1: config 0 descriptor?? [ 822.856994][ T4979] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 823.104094][ T4979] usb 3-1: USB disconnect, device number 58 [ 824.147029][T19420] loop4: detected capacity change from 0 to 4096 [ 824.161834][T19427] netlink: 148 bytes leftover after parsing attributes in process `syz.2.6834'. [ 824.211857][T19420] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 824.431436][T19434] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6846'. [ 824.727595][ T4978] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 824.973462][ T4978] usb 5-1: Using ep0 maxpacket: 8 [ 825.093710][ T4978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 825.105879][ T4978] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 825.116298][ T4978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.134662][ T4978] usb 5-1: config 0 descriptor?? [ 825.396435][ T4978] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 825.614370][ T1346] usb 5-1: USB disconnect, device number 35 [ 826.474036][T19475] loop3: detected capacity change from 0 to 256 [ 826.494835][ T26] audit: type=1326 audit(2000000590.506:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19471 comm="syz.0.6852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca01979be9 code=0x7ffc0000 [ 826.561806][ T26] audit: type=1326 audit(2000000590.506:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19471 comm="syz.0.6852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca01979be9 code=0x7ffc0000 [ 826.591918][T19468] loop4: detected capacity change from 0 to 4096 [ 826.620881][T19475] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0xd9d80cab, utbl_chksum : 0xe619d30d) [ 826.656339][ T26] audit: type=1326 audit(2000000590.516:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19471 comm="syz.0.6852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7fca01979be9 code=0x7ffc0000 [ 826.783886][ T26] audit: type=1326 audit(2000000590.516:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19471 comm="syz.0.6852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca01979be9 code=0x7ffc0000 [ 826.918429][ T26] audit: type=1326 audit(2000000590.516:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19471 comm="syz.0.6852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca01979be9 code=0x7ffc0000 [ 826.975166][T19484] ptrace attach of "./syz-executor exec"[4185] was attempted by " Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ    ÿÿÿÿ   ÿÿÿÿ  [ 827.199843][T19491] loop4: detected capacity change from 0 to 4096 [ 827.317096][T19491] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 828.092824][T19532] device macsec0 entered promiscuous mode [ 828.136898][T19532] device macsec0 left promiscuous mode [ 828.315746][T19547] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6889'. [ 828.422021][T19545] loop3: detected capacity change from 0 to 4096 [ 828.702554][ T4185] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 828.709766][ T4185] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 828.776219][T19559] lo speed is unknown, defaulting to 1000 [ 828.872545][T19563] loop3: detected capacity change from 0 to 4096 [ 828.940824][T19566] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 829.193697][T19573] loop3: detected capacity change from 0 to 64 [ 829.251393][T19577] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6902'. [ 829.285965][T19579] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 829.294520][T19573] hfs: bad catalog entry type 0 [ 830.760791][T19590] loop4: detected capacity change from 0 to 32768 [ 830.974606][T19590] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 831.163008][ T5699] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 831.254342][ T4195] ocfs2: Unmounting device (7,4) on (node local) [ 831.414650][ T5699] usb 3-1: Using ep0 maxpacket: 8 [ 831.436466][T19645] loop3: detected capacity change from 0 to 1024 [ 831.534612][ T5699] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 831.723027][ T5699] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 831.744244][ T5699] usb 3-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 831.778931][ T5699] usb 3-1: Product: syz [ 831.828313][ T5699] usb 3-1: Manufacturer: syz [ 831.865559][ T5699] usb 3-1: SerialNumber: syz [ 831.885372][ T5699] usb 3-1: config 0 descriptor?? [ 831.960926][ T5699] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 832.182988][T19666] usb usb7: selecting invalid altsetting 6 [ 832.383212][ T5699] gspca_zc3xx: reg_w_i err -71 [ 832.432353][T19682] option changes via remount are deprecated (pid=19681 comm=syz.1.6946) [ 832.507011][T19678] loop3: detected capacity change from 0 to 4096 [ 832.586199][T19678] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 832.664035][T19678] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 833.002469][ T5699] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 833.009034][ T5699] gspca_zc3xx: probe of 3-1:0.0 failed with error -71 [ 833.062805][ T5699] usb 3-1: USB disconnect, device number 59 [ 833.556683][T19708] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6959'. [ 833.675260][T19684] loop4: detected capacity change from 0 to 32768 [ 833.686863][T19711] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6959'. [ 833.775264][T19684] (syz.4.6947,19684,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 833.786832][T19715] netlink: 'syz.0.6962': attribute type 3 has an invalid length. [ 833.858981][T19684] (syz.4.6947,19684,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 833.946093][T19684] (syz.4.6947,19684,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 833.980476][T19684] JBD2: Ignoring recovery information on journal [ 834.132992][T19684] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 834.497677][ T4195] ocfs2: Unmounting device (7,4) on (node local) [ 834.555089][T19730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6969'. [ 835.075648][T19722] loop3: detected capacity change from 0 to 40427 [ 835.158750][T19722] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 835.191346][T19722] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 835.296386][T19745] siw: device registration error -23 [ 835.353988][T19722] F2FS-fs (loop3): Found nat_bits in checkpoint [ 835.548631][T19722] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 835.567122][T19722] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 835.761327][T19765] loop4: detected capacity change from 0 to 1024 [ 835.838988][T19765] EXT4-fs (loop4): required journal recovery suppressed and not mounted read-only [ 836.791378][T19791] loop4: detected capacity change from 0 to 8 [ 836.894462][T19791] SQUASHFS error: lzo decompression failed, data probably corrupt [ 836.930487][T19791] SQUASHFS error: Failed to read block 0x144: -5 [ 836.958105][T19791] SQUASHFS error: Unable to read metadata cache entry [142] [ 836.978006][T19791] SQUASHFS error: Unable to read inode 0x11f [ 837.173746][T19803] netlink: 'syz.2.6999': attribute type 3 has an invalid length. [ 837.737597][T19821] loop4: detected capacity change from 0 to 136 [ 837.780155][T19821] Attempt to read inode for relocated directory [ 837.904648][T19827] netlink: 'syz.3.7011': attribute type 3 has an invalid length. [ 838.063540][T19834] loop4: detected capacity change from 0 to 1024 [ 838.108681][ T1106] kernel write not supported for file /amidi2 (pid: 1106 comm: kworker/1:2) [ 838.408066][T19843] loop3: detected capacity change from 0 to 4096 [ 838.656005][T19848] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 838.882655][T19857] kvm [19854]: vcpu1, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010004 data 0x0 [ 839.220672][T19869] usb usb7: selecting invalid altsetting 6 [ 839.377604][T19874] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7042'. [ 839.582370][T19882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7034'. [ 840.141392][T19905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7046'. [ 840.261310][T19907] siw: device registration error -23 [ 841.135614][T19924] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7052'. [ 841.197578][T19924] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7052'. [ 841.315089][T19932] loop4: detected capacity change from 0 to 1024 [ 841.835829][T19947] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7063'. [ 841.869830][T19949] loop4: detected capacity change from 0 to 512 [ 842.022824][T19949] EXT4-fs (loop4): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 842.042158][T19949] ext4 filesystem being mounted at /1083/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 842.240816][T19963] tipc: Enabling of bearer rejected, failed to enable media [ 842.354233][T19966] device macsec0 entered promiscuous mode [ 842.392324][T19966] device macsec0 left promiscuous mode [ 842.812649][T19986] team0: Device ip6gre1 is of different type [ 842.892445][T19954] loop3: detected capacity change from 0 to 32768 [ 842.965392][T19954] (syz.3.7066,19954,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 843.054620][T19954] (syz.3.7066,19954,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 843.088034][T19988] loop4: detected capacity change from 0 to 32768 [ 843.131033][T19954] (syz.3.7066,19954,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 843.164993][T19988] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.7079 (19988) [ 843.228569][T19954] JBD2: Ignoring recovery information on journal [ 843.246541][T19988] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 843.256555][T19988] BTRFS info (device loop4): using free space tree [ 843.263602][T19988] BTRFS info (device loop4): has skinny extents [ 843.554827][T19954] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 843.690203][T19988] BTRFS info (device loop4): enabling ssd optimizations [ 843.739646][T19954] (syz.3.7066,19954,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x28030c75. Applying ECC. [ 843.755874][T19988] BTRFS error (device loop4): balance: invalid convert metadata profile single [ 843.811232][T19954] (syz.3.7066,19954,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x28d1d8ae [ 843.871476][T19954] (syz.3.7066,19954,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 843.942172][T19954] (syz.3.7066,19954,1):ocfs2_quota_read:201 ERROR: status = -5 [ 843.948699][T20029] device macsec0 entered promiscuous mode [ 843.980943][T19954] Quota error (device loop3): find_next_id: Can't read quota tree block 5 [ 843.999116][T19954] (syz.3.7066,19954,0):ocfs2_get_next_id:909 ERROR: status = -5 [ 844.019681][T20029] device macsec0 left promiscuous mode [ 844.475245][ T4185] ocfs2: Unmounting device (7,3) on (node local) [ 844.540609][T20036] siw: device registration error -23 [ 844.806482][T20050] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7100'. [ 844.978917][T20058] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7094'. [ 845.362185][T20079] device macsec0 entered promiscuous mode [ 845.394509][T20079] device macsec0 left promiscuous mode [ 845.795042][T20089] loop4: detected capacity change from 0 to 4096 [ 846.094603][ T4195] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 846.112018][ T4195] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 846.452420][T20114] loop4: detected capacity change from 0 to 2048 [ 846.510300][T20114] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 846.573850][T20118] vxcan0: tx address claim with dlc 0 [ 847.026346][T20141] input: syz0 as /devices/virtual/input/input67 [ 847.196686][T20148] vxcan0: tx address claim with dlc 0 [ 847.205169][T20146] loop3: detected capacity change from 0 to 2048 [ 847.312673][T20146] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 847.477130][T20158] lo speed is unknown, defaulting to 1000 [ 847.623463][T20162] loop4: detected capacity change from 0 to 8 [ 847.714309][T20162] SQUASHFS error: Unknown inode type 1078 in squashfs_iget! [ 847.747188][T20162] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 848.814146][T20188] loop4: detected capacity change from 0 to 40427 [ 848.868634][T20188] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 848.878575][T20188] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 848.932923][T20188] F2FS-fs (loop4): Found nat_bits in checkpoint [ 849.052256][T20188] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 849.059458][T20188] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 849.119792][T20200] sp0: Synchronizing with TNC [ 849.546933][T20206] loop3: detected capacity change from 0 to 4096 [ 849.646444][T20206] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 850.072460][T20220] lo speed is unknown, defaulting to 1000 [ 850.401097][T20231] tipc: New replicast peer: 255.255.255.255 [ 850.419806][T20231] tipc: Enabled bearer , priority 10 [ 850.732422][T20240] sp0: Synchronizing with TNC [ 850.880765][T20240] Falling back ldisc for ptm0. [ 851.081717][T20250] sch_fq: defrate 0 ignored. [ 851.126120][T20248] kvm [20247]: vcpu1, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010004 data 0x0 [ 851.184644][T20253] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7183'. [ 851.401202][T18640] tipc: Node number set to 4269801488 [ 851.819469][T20281] tipc: Enabling of bearer rejected, failed to enable media [ 852.171183][ T26] audit: type=1326 audit(2000000616.189:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20290 comm="syz.0.7197" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fca01979be9 code=0x0 [ 852.743978][T20256] loop4: detected capacity change from 0 to 40427 [ 852.798794][T20256] F2FS-fs (loop4): invalid crc value [ 852.826915][T20256] F2FS-fs (loop4): Found nat_bits in checkpoint [ 852.912775][T20256] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 852.958631][T20289] loop3: detected capacity change from 0 to 32768 [ 852.997835][ T4195] attempt to access beyond end of device [ 852.997835][ T4195] loop4: rw=2049, want=45104, limit=40427 [ 853.101281][T20289] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.7196 (20289) [ 853.317225][T20289] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 853.373770][T20289] BTRFS info (device loop3): force zlib compression, level 3 [ 853.418202][T20289] BTRFS info (device loop3): force clearing of disk cache [ 853.460163][T20289] BTRFS info (device loop3): disabling tree log [ 853.466499][T20289] BTRFS info (device loop3): doing ref verification [ 853.523738][T20289] BTRFS info (device loop3): allowing degraded mounts [ 853.561393][T20289] BTRFS info (device loop3): enabling disk space caching [ 853.568873][T20289] BTRFS info (device loop3): disk space caching is enabled [ 853.636030][T20289] BTRFS info (device loop3): has skinny extents [ 853.986608][ T144] BTRFS warning (device loop3): checksum verify failed on 5332992 wanted 0x6683c582e6d194bc found 0x7ae55a1b3c9e6e38 level 0 [ 854.117810][T20289] BTRFS warning (device loop3): couldn't read tree root [ 854.290602][T20289] BTRFS error (device loop3): open_ctree failed: -22 [ 854.691848][T20367] netlink: 'syz.1.7221': attribute type 21 has an invalid length. [ 854.720027][T20367] netlink: 'syz.1.7221': attribute type 20 has an invalid length. [ 854.757972][T20367] IPv6: NLM_F_CREATE should be specified when creating new route [ 854.908640][T20373] input: syz1 as /devices/virtual/input/input68 [ 855.506770][T20404] netlink: 'syz.0.7237': attribute type 21 has an invalid length. [ 855.546825][T20404] netlink: 'syz.0.7237': attribute type 20 has an invalid length. [ 855.575561][T20404] IPv6: NLM_F_CREATE should be specified when creating new route [ 855.642428][ T4248] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 855.882954][T20419] bond0: (slave bond1): Error -95 calling ndo_bpf [ 855.932166][ T4248] usb 4-1: Using ep0 maxpacket: 8 [ 855.940502][T20421] netlink: 'syz.0.7244': attribute type 10 has an invalid length. [ 855.960230][T20421] device netdevsim0 left promiscuous mode [ 855.969508][T20421] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 856.040332][T20423] team0: Device ip6gre2 is of different type [ 856.056311][ T4248] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 856.096173][ T4248] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 856.149250][ T4248] usb 4-1: New USB device found, idVendor=056a, idProduct=0002, bcdDevice= 0.00 [ 856.193837][ T4248] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.263178][ T4248] usb 4-1: config 0 descriptor?? [ 856.753816][T20400] loop3: detected capacity change from 0 to 8 [ 856.893701][T20400] SQUASHFS error: zlib decompression failed, data probably corrupt [ 856.935602][T20400] SQUASHFS error: Failed to read block 0x9b: -5 [ 856.981423][T20400] SQUASHFS error: Unable to read metadata cache entry [99] [ 857.032657][T20400] SQUASHFS error: Unable to read inode 0x127 [ 857.235066][ T4248] wacom 0003:056A:0002.0041: Unknown device_type for 'HID 056a:0002'. Ignoring. [ 857.470314][T18637] usb 4-1: USB disconnect, device number 38 [ 857.564786][T20481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7272'. [ 858.410089][ T1106] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 858.533630][T20523] loop3: detected capacity change from 0 to 64 [ 858.590942][T20523] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 858.654398][T20523] hfs: filesystem is marked locked, mounting read-only. [ 858.689891][ T1106] usb 5-1: Using ep0 maxpacket: 32 [ 858.809984][ T1106] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 858.836312][ T1106] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.170883][ T1106] usb 5-1: config 0 descriptor?? [ 859.419482][ T1106] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 859.440605][ T1106] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 859.510359][ T1106] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 859.526393][ T1106] usb 5-1: media controller created [ 859.561634][ T1106] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 859.628400][T20505] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 859.660630][ T1106] az6027: usb out operation failed. (-71) [ 859.699728][ T1106] az6027: usb out operation failed. (-71) [ 859.710550][ T1106] stb0899_attach: Driver disabled by Kconfig [ 859.746478][ T1106] az6027: no front-end attached [ 859.746478][ T1106] [ 859.789710][ T1106] az6027: usb out operation failed. (-71) [ 859.799055][ T1106] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 859.824089][ T1106] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input72 [ 859.879990][ T1106] dvb-usb: schedule remote query interval to 400 msecs. [ 859.903013][ T1106] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 859.936644][ T1106] usb 5-1: USB disconnect, device number 36 [ 860.067159][ T1106] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 860.241847][T20574] loop3: detected capacity change from 0 to 4096 [ 860.292767][T20521] overlayfs: failed to resolve './file0': -2 [ 860.301948][T20574] ntfs3: Unknown parameter '184467440737095516150177777777777777777777700000000000000000000000¤¬”.}ëÇŸžxIÏÏB|–Ô. ’¾‰ùaºø‡©›ä' [ 860.541605][T20591] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 860.602109][T20591] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 860.972310][T20608] bond0: (slave bond1): Error -95 calling ndo_bpf [ 860.982857][T20608] netlink: 'syz.3.7315': attribute type 10 has an invalid length. [ 861.021725][T20608] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 861.471466][T20635] netlink: 'syz.0.7327': attribute type 21 has an invalid length. [ 861.501936][T20635] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7327'. [ 861.533444][T20635] netlink: 'syz.0.7327': attribute type 5 has an invalid length. [ 861.547305][T20635] netlink: 'syz.0.7327': attribute type 6 has an invalid length. [ 861.559380][T20635] netlink: 3 bytes leftover after parsing attributes in process `syz.0.7327'. [ 861.707744][T20642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7330'. [ 861.709142][ T4979] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 861.979301][ T4979] usb 4-1: Using ep0 maxpacket: 32 [ 862.046241][T20656] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7339'. [ 862.065074][T20656] netlink: 'syz.2.7339': attribute type 6 has an invalid length. [ 862.086641][T20656] netlink: 'syz.2.7339': attribute type 5 has an invalid length. [ 862.105105][ T4979] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 862.124392][T20656] netlink: 'syz.2.7339': attribute type 4 has an invalid length. [ 862.135847][ T4979] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.165734][ T4979] usb 4-1: config 0 descriptor?? [ 862.186613][T20658] sp0: Synchronizing with TNC [ 862.223481][ T4979] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 862.622060][T20669] loop4: detected capacity change from 0 to 4096 [ 862.654993][ T4979] gspca_nw80x: reg_r err -71 [ 862.674818][ T4979] nw80x: probe of 4-1:0.0 failed with error -71 [ 862.685066][ T4979] usb 4-1: USB disconnect, device number 39 [ 862.692707][T20669] ntfs3: Unknown parameter '184467440737095516150177777777777777777777700000000000000000000000¤¬”.}ëÇŸžxIÏÏB|–Ô. ’¾‰ùaºø‡©›ä' [ 863.369324][ T1106] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 863.552411][T20722] overlayfs: statfs failed on './file0' [ 863.779661][ T1106] usb 5-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 863.809709][ T1106] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.851079][ T1106] usb 5-1: config 0 descriptor?? [ 863.893310][ T1106] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 864.329000][ T1106] gspca_sunplus: reg_w_riv err -71 [ 864.336929][ T1106] sunplus: probe of 5-1:0.0 failed with error -71 [ 864.399238][ T1106] usb 5-1: USB disconnect, device number 37 [ 864.732638][T20747] loop3: detected capacity change from 0 to 40427 [ 864.753974][T20747] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x1ffff [ 864.765483][T20747] F2FS-fs (loop3): invalid crc value [ 864.788543][T20747] F2FS-fs (loop3): Found nat_bits in checkpoint [ 864.916536][T20747] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 865.135875][T20747] F2FS-fs (loop3) : inject dquot initialize in f2fs_dquot_initialize of f2fs_unlink+0x204/0xba0 [ 865.155121][T20747] overlayfs: cleanup of 'work/#b' failed (-3) [ 865.186568][T20769] sp0: Synchronizing with TNC [ 865.205488][T20747] overlayfs: failed to resolve './file0': -2 [ 865.304184][ T4185] attempt to access beyond end of device [ 865.304184][ T4185] loop3: rw=2049, want=45112, limit=40427 [ 866.091940][T20796] loop4: detected capacity change from 0 to 1024 [ 866.121913][T20778] overlayfs: failed to resolve './file0': -2 [ 866.131645][T20796] EXT4-fs (loop4): Ignoring removed bh option [ 866.137856][T20796] EXT4-fs (loop4): inline encryption not supported [ 866.160525][T20796] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 866.187936][T20796] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #3: block 2: comm syz.4.7388: lblock 2 mapped to illegal pblock 2 (length 1) [ 866.226864][T20796] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 866.236034][T20796] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #3: block 48: comm syz.4.7388: lblock 0 mapped to illegal pblock 48 (length 1) [ 866.263879][T20796] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 866.288983][T20796] EXT4-fs error (device loop4): ext4_acquire_dquot:6207: comm syz.4.7388: Failed to acquire dquot type 0 [ 866.314782][T20796] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 866.334020][T20796] EXT4-fs error (device loop4): ext4_evict_inode:282: inode #11: comm syz.4.7388: mark_inode_dirty error [ 866.402546][T20796] EXT4-fs warning (device loop4): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 866.421693][T20806] sp0: Synchronizing with TNC [ 866.436305][T20796] EXT4-fs (loop4): 1 orphan inode deleted [ 866.453142][ T4288] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 866.468337][T20796] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,noblock_validity,bh,max_batch_time=0x00000000000008c9,debug,inlinecrypt,,errors=continue. Quota mode: writeback. [ 866.493327][ T4288] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 866.503034][ T4288] EXT4-fs error (device loop4): ext4_release_dquot:6243: comm kworker/u4:6: Failed to release dquot type 0 [ 866.601524][ T4195] EXT4-fs error (device loop4): __ext4_get_inode_loc:4321: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 866.615551][T20813] netlink: 'syz.2.7392': attribute type 21 has an invalid length. [ 866.649978][T20813] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7392'. [ 866.658085][ T4195] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 866.669558][T20813] netlink: 'syz.2.7392': attribute type 5 has an invalid length. [ 866.701370][T20813] netlink: 'syz.2.7392': attribute type 6 has an invalid length. [ 866.728728][T20813] netlink: 3 bytes leftover after parsing attributes in process `syz.2.7392'. [ 866.738836][ T4195] EXT4-fs error (device loop4): ext4_quota_off:6513: inode #3: comm syz-executor: mark_inode_dirty error [ 866.924346][T20826] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 866.956384][T20826] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 867.618024][T20822] loop3: detected capacity change from 0 to 32768 [ 867.651622][T20822] XFS: noikeep mount option is deprecated. [ 867.687525][T20845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7402'. [ 867.781228][T20822] XFS (loop3): Mounting V5 Filesystem [ 867.827627][T20838] loop4: detected capacity change from 0 to 40427 [ 867.877243][T20822] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 867.947265][T20838] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x1ffff [ 867.952599][T20822] XFS (loop3): Starting recovery (logdev: internal) [ 867.995861][T20838] F2FS-fs (loop4): invalid crc value [ 868.014361][T20838] F2FS-fs (loop4): Found nat_bits in checkpoint [ 868.074046][T20822] XFS (loop3): Ending recovery (logdev: internal) [ 868.264602][T20838] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 868.325720][ T4185] XFS (loop3): Unmounting Filesystem [ 868.394509][T20838] F2FS-fs (loop4) : inject dquot initialize in f2fs_dquot_initialize of f2fs_unlink+0x204/0xba0 [ 868.478383][T20838] overlayfs: cleanup of 'work/#f' failed (-3) [ 868.486135][T20838] overlayfs: failed to resolve './file0': -2 [ 868.703131][ T4195] attempt to access beyond end of device [ 868.703131][ T4195] loop4: rw=2049, want=45112, limit=40427 [ 868.814966][T20880] sp0: Synchronizing with TNC [ 869.784087][T20921] ALSA: mixer_oss: invalid OSS volume '' [ 870.211217][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.217812][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.000716][T20989] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7455'. [ 871.019754][T20988] loop3: detected capacity change from 0 to 1024 [ 871.089611][T20988] EXT4-fs (loop3): Ignoring removed bh option [ 871.138021][T20988] EXT4-fs (loop3): inline encryption not supported [ 871.185629][T20988] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 871.230009][T20988] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #3: block 2: comm syz.3.7454: lblock 2 mapped to illegal pblock 2 (length 1) [ 871.270278][T20988] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 871.342064][T20988] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #3: block 48: comm syz.3.7454: lblock 0 mapped to illegal pblock 48 (length 1) [ 871.367369][T21007] netlink: 'syz.0.7473': attribute type 1 has an invalid length. [ 871.433207][T20988] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 871.503020][T20988] EXT4-fs error (device loop3): ext4_acquire_dquot:6207: comm syz.3.7454: Failed to acquire dquot type 0 [ 871.565542][T20988] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 871.614190][T20988] EXT4-fs error (device loop3): ext4_evict_inode:282: inode #11: comm syz.3.7454: mark_inode_dirty error [ 871.646919][T20988] EXT4-fs warning (device loop3): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 871.683799][T20988] EXT4-fs (loop3): 1 orphan inode deleted [ 871.703836][ T3096] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 871.735554][T20988] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,noblock_validity,bh,max_batch_time=0x00000000000008c9,debug,inlinecrypt,,errors=continue. Quota mode: writeback. [ 871.771234][ T3096] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 871.784612][ T3096] EXT4-fs error (device loop3): ext4_release_dquot:6243: comm kworker/u4:5: Failed to release dquot type 0 [ 871.818294][ T4979] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 872.009321][ T4185] EXT4-fs error (device loop3): __ext4_get_inode_loc:4321: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 872.043019][ T4185] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 872.076030][ T4185] EXT4-fs error (device loop3): ext4_quota_off:6513: inode #3: comm syz-executor: mark_inode_dirty error [ 872.088465][ T4979] usb 3-1: Using ep0 maxpacket: 16 [ 872.208333][ T4979] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 872.233994][ T4979] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 872.264865][T21036] loop3: detected capacity change from 0 to 256 [ 872.265467][ T4979] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 872.305876][ T4979] usb 3-1: config 0 interface 0 has no altsetting 0 [ 872.331508][ T4979] usb 3-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 872.347996][ T4979] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.370648][ T4979] usb 3-1: config 0 descriptor?? [ 872.387191][T21036] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 872.553553][T21023] loop4: detected capacity change from 0 to 32768 [ 872.681128][T21023] find_entry called with index = 0 [ 872.738781][T21023] read_mapping_page failed! [ 872.743391][T21023] ERROR: (device loop4): txCommit: [ 872.743391][T21023] [ 872.871408][ T4979] playstation 0003:054C:0CE6.0042: hidraw0: USB HID v0.00 Device [HID 054c:0ce6] on usb-dummy_hcd.2-1/input0 [ 873.077944][ T4979] playstation 0003:054C:0CE6.0042: Invalid reportID received, expected 9 got 89 [ 873.107496][ T4979] playstation 0003:054C:0CE6.0042: Failed to retrieve DualSense pairing info: -22 [ 873.141075][ T4979] playstation 0003:054C:0CE6.0042: Failed to get MAC address from DualSense [ 873.156253][ T4979] playstation 0003:054C:0CE6.0042: Failed to create dualsense. [ 873.195183][ T4979] playstation: probe of 0003:054C:0CE6.0042 failed with error -22 [ 873.335041][ T4979] usb 3-1: USB disconnect, device number 60 [ 873.503467][T21059] fido_id[21059]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 873.602907][T21073] netlink: 'syz.4.7493': attribute type 1 has an invalid length. [ 873.801008][T21080] device macsec0 entered promiscuous mode [ 873.994881][ T4288] wlan1: Trigger new scan to find an IBSS to join [ 874.129144][ T4288] ------------[ cut here ]------------ [ 874.136022][ T4288] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xfff with flags 0x20 [ 874.146995][ T4288] WARNING: CPU: 0 PID: 4288 at net/mac80211/rate.c:376 __rate_control_send_low+0x630/0x880 [ 874.157147][ T4288] Modules linked in: [ 874.161139][ T4288] CPU: 0 PID: 4288 Comm: kworker/u4:6 Not tainted 5.15.189-syzkaller #0 [ 874.169632][ T4288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 874.179787][ T4288] Workqueue: phy10 ieee80211_scan_work [ 874.185299][ T4288] RIP: 0010:__rate_control_send_low+0x630/0x880 [ 874.191654][ T4288] Code: 0f b6 04 28 84 c0 0f 85 e9 01 00 00 48 8b 44 24 08 8b 08 48 c7 c7 60 b9 18 8b 4c 89 f6 44 8b 44 24 14 45 89 f9 e8 e0 2e 68 00 <0f> 0b e9 72 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 08 fa ff [ 874.211712][ T4288] RSP: 0018:ffffc9000478f488 EFLAGS: 00010246 [ 874.214317][T21098] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 874.218088][ T4288] RAX: 5623efa7884fe200 RBX: 000000000000000c RCX: ffff88802b7d3b80 [ 874.218197][ T4288] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 874.218213][ T4288] RBP: 0000000000000084 R08: dffffc0000000000 R09: fffff520008f1df5 [ 874.218229][ T4288] R10: fffff520008f1df5 R11: 1ffff920008f1df4 R12: ffff88802415f168 [ 874.218246][ T4288] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000020 [ 874.218261][ T4288] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 874.218280][ T4288] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 874.218296][ T4288] CR2: 000055557e480808 CR3: 000000002ad55000 CR4: 00000000003506f0 [ 874.218315][ T4288] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 874.218329][ T4288] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 874.218344][ T4288] Call Trace: [ 874.218353][ T4288] [ 874.218377][ T4288] rate_control_send_low+0x194/0x790 [ 874.218407][ T4288] ? ieee80211_scan_work+0x4ea/0x1b40 [ 874.218436][ T4288] rate_control_get_rate+0x207/0x5c0 [ 874.218468][ T4288] ieee80211_tx_h_rate_ctrl+0xac5/0x1700 [ 874.218521][ T4288] ? ieee80211_tx_h_select_key+0x1680/0x1680 [ 874.218554][ T4288] ? sta_info_hash_lookup+0x53e/0x580 [ 874.218579][ T4288] ? ieee80211_queue_skb+0xd0/0x2120 [ 874.218606][ T4288] invoke_tx_handlers_late+0xaa/0x16a0 [ 874.218631][ T4288] ? ieee80211_tx_h_select_key+0x1172/0x1680 [ 874.218654][ T4288] ? sta_info_get+0x220/0x230 [ 874.218679][ T4288] ? invoke_tx_handlers_early+0xa11/0x1d10 [ 874.218711][ T4288] ieee80211_tx+0x2a9/0x410 [ 874.218735][ T4288] ? ieee80211_skb_resize+0x630/0x630 [ 874.286082][T21090] loop4: detected capacity change from 0 to 4096 [ 874.292309][ T4288] __ieee80211_tx_skb_tid_band+0x165/0x200 [ 874.292352][ T4288] ieee80211_scan_state_send_probe+0x526/0x8a0 [ 874.292404][ T4288] ieee80211_scan_work+0x4ea/0x1b40 [ 874.292457][ T4288] process_one_work+0x863/0x1000 [ 874.292507][ T4288] ? worker_detach_from_pool+0x240/0x240 [ 874.292530][ T4288] ? lockdep_hardirqs_off+0x70/0x100 [ 874.292558][ T4288] ? _raw_spin_lock_irq+0xab/0xe0 [ 874.292583][ T4288] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 874.292610][ T4288] ? wq_worker_running+0x97/0x170 [ 874.292635][ T4288] worker_thread+0xaa8/0x12a0 [ 874.292657][ T4288] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 874.292683][ T4288] ? lockdep_hardirqs_on+0x94/0x140 [ 874.292711][ T4288] ? lockdep_hardirqs_on+0x94/0x140 [ 874.292732][ T4288] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 874.292768][ T4288] kthread+0x436/0x520 [ 874.476097][ T4288] ? rcu_lock_release+0x20/0x20 [ 874.481104][ T4288] ? kthread_blkcg+0xd0/0xd0 [ 874.486085][ T4288] ret_from_fork+0x1f/0x30 [ 874.490627][ T4288] [ 874.493793][ T4288] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 874.501399][ T4288] CPU: 0 PID: 4288 Comm: kworker/u4:6 Not tainted 5.15.189-syzkaller #0 [ 874.509881][ T4288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 874.520221][ T4288] Workqueue: phy10 ieee80211_scan_work [ 874.525929][ T4288] Call Trace: [ 874.529642][ T4288] [ 874.532590][ T4288] dump_stack_lvl+0x168/0x230 [ 874.537397][ T4288] ? show_regs_print_info+0x20/0x20 [ 874.543044][ T4288] ? load_image+0x3b0/0x3b0 [ 874.548096][ T4288] panic+0x2c9/0x7f0 [ 874.552344][ T4288] ? bpf_jit_dump+0xd0/0xd0 [ 874.556992][ T4288] ? ret_from_fork+0x1f/0x30 [ 874.561616][ T4288] ? __rate_control_send_low+0x630/0x880 [ 874.567348][ T4288] __warn+0x248/0x2b0 [ 874.571435][ T4288] ? __rate_control_send_low+0x630/0x880 [ 874.577098][ T4288] report_bug+0x1b7/0x2e0 [ 874.581453][ T4288] handle_bug+0x3a/0x70 [ 874.585635][ T4288] exc_invalid_op+0x16/0x40 [ 874.590205][ T4288] asm_exc_invalid_op+0x16/0x20 [ 874.595405][ T4288] RIP: 0010:__rate_control_send_low+0x630/0x880 [ 874.602056][ T4288] Code: 0f b6 04 28 84 c0 0f 85 e9 01 00 00 48 8b 44 24 08 8b 08 48 c7 c7 60 b9 18 8b 4c 89 f6 44 8b 44 24 14 45 89 f9 e8 e0 2e 68 00 <0f> 0b e9 72 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 08 fa ff [ 874.622364][ T4288] RSP: 0018:ffffc9000478f488 EFLAGS: 00010246 [ 874.628479][ T4288] RAX: 5623efa7884fe200 RBX: 000000000000000c RCX: ffff88802b7d3b80 [ 874.636780][ T4288] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 874.645621][ T4288] RBP: 0000000000000084 R08: dffffc0000000000 R09: fffff520008f1df5 [ 874.653701][ T4288] R10: fffff520008f1df5 R11: 1ffff920008f1df4 R12: ffff88802415f168 [ 874.661691][ T4288] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000020 [ 874.669970][ T4288] ? __rate_control_send_low+0x630/0x880 [ 874.676429][ T4288] rate_control_send_low+0x194/0x790 [ 874.681961][ T4288] ? ieee80211_scan_work+0x4ea/0x1b40 [ 874.687523][ T4288] rate_control_get_rate+0x207/0x5c0 [ 874.693292][ T4288] ieee80211_tx_h_rate_ctrl+0xac5/0x1700 [ 874.699758][ T4288] ? ieee80211_tx_h_select_key+0x1680/0x1680 [ 874.706565][ T4288] ? sta_info_hash_lookup+0x53e/0x580 [ 874.712928][ T4288] ? ieee80211_queue_skb+0xd0/0x2120 [ 874.718650][ T4288] invoke_tx_handlers_late+0xaa/0x16a0 [ 874.724353][ T4288] ? ieee80211_tx_h_select_key+0x1172/0x1680 [ 874.730685][ T4288] ? sta_info_get+0x220/0x230 [ 874.735601][ T4288] ? invoke_tx_handlers_early+0xa11/0x1d10 [ 874.741609][ T4288] ieee80211_tx+0x2a9/0x410 [ 874.746760][ T4288] ? ieee80211_skb_resize+0x630/0x630 [ 874.752379][ T4288] __ieee80211_tx_skb_tid_band+0x165/0x200 [ 874.758480][ T4288] ieee80211_scan_state_send_probe+0x526/0x8a0 [ 874.764696][ T4288] ieee80211_scan_work+0x4ea/0x1b40 [ 874.769939][ T4288] process_one_work+0x863/0x1000 [ 874.775499][ T4288] ? worker_detach_from_pool+0x240/0x240 [ 874.781406][ T4288] ? lockdep_hardirqs_off+0x70/0x100 [ 874.786903][ T4288] ? _raw_spin_lock_irq+0xab/0xe0 [ 874.792380][ T4288] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 874.798008][ T4288] ? wq_worker_running+0x97/0x170 [ 874.803169][ T4288] worker_thread+0xaa8/0x12a0 [ 874.807867][ T4288] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 874.813967][ T4288] ? lockdep_hardirqs_on+0x94/0x140 [ 874.819188][ T4288] ? lockdep_hardirqs_on+0x94/0x140 [ 874.824615][ T4288] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 874.830617][ T4288] kthread+0x436/0x520 [ 874.834784][ T4288] ? rcu_lock_release+0x20/0x20 [ 874.839725][ T4288] ? kthread_blkcg+0xd0/0xd0 [ 874.844433][ T4288] ret_from_fork+0x1f/0x30 [ 874.848969][ T4288] [ 874.852495][ T4288] Kernel Offset: disabled [ 874.857562][ T4288] Rebooting in 86400 seconds..